Computing

SAP patches critical Python SDK flaw that could expose OAuth credentials

SAP has patched a maximum-severity flaw in its Cloud SDK for Python that could expose OAuth credentials in multi-tenant BTP applications, alongside 19 other vulnerabilities in its October security ...
CIO

SAP’s new API policy restricts AI access, draws customer criticism

Limiting API usage to “SAP-endorsed architectures, data services, or service-specific pathways,” SAP has encountered pushback from the DSAG user group over the scope and implications of the updated ...
BleepingComputer

SAP warns of maximum severity OAuth2 SSRF security flaw

SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. The SAP Python SDK is the ...
合同会社ロケットボーイズ

SAP Cloud SDK for PythonにCVSS 10.0のSSRF脆弱性、OAuth2認証情報が窃取される恐れ―CVE-2026-89111を修正

SAPは2026年10月13日、Cloud SDK for PythonのOAuth2 SSRF脆弱性CVE-2026-89111を公表。CVSSは最大の10.0で、テナント指定値を悪用した認証情報窃取の恐れがあります。影響バージョン、0.45.2への更新、許可リストによる暫定対策、NetWeaver・S/4HANAの重大修正も解説 ...