SAP patches maximum-severity OAuth2 credential theft flaw in Cloud SDK for Python

Vulnerability details

SAP has released its October 2026 security updates addressing 20 vulnerabilities across its product portfolio, headlined by CVE-2026-89111, a maximum-severity flaw in the Cloud SDK for Python. The SDK serves as the official programmatic toolkit for developing AI agents and Python applications on SAP Business Technology Platform services.

The OAuth2 SSRF vulnerability affects multi-tenant BTP applications and can be exploited by remote attackers without requiring any privileges. By controlling the tenant_subdomain parameter, attackers can redirect OAuth2 token requests to attacker-controlled servers, causing client credentials to be exfiltrated. SAP has confirmed that organizations unable to deploy patches immediately can temporarily mitigate the risk by validating tenant_subdomain values against a known allowlist of registered tenant subdomains before passing them to SDK calls.

Additional critical flaws patched

The October update also addresses CVE-2026-89110, a critical broken access control vulnerability in SAP NetWeaver Visual Composer that permits remote attackers with limited privileges to fully compromise vulnerable systems. A third critical flaw, CVE-2026-89108, affects SAP Manufacturing Integration and Intelligence, allowing threat actors with administrator privileges to provision elevated-privilege accounts on the underlying Java application and gain admin control over the system.

Broader context

SAP has patched several maximum-severity vulnerabilities in recent months, including CVE-2026-58231 in Commerce Cloud in August, which was flagged as actively exploited shortly after disclosure. The U.S. Cybersecurity and Infrastructure Security Agency has catalogued 14 SAP security flaws as actively exploited since November 2021, with three confirmed as leveraged in ransomware attacks. SAP serves 99 of the world's 100 largest companies and reported revenues exceeding €36 billion in fiscal year 2025.