Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
SAP Security Patch Day, October 2026: 22 items, 4 critical. The only 10.0 is not an SAP Note. CVE-2026-89111 sits in the SAP Cloud SDK for Python, so the fix is a package upgrade on SAP BTP, not SNOTE. Workarounds exist for 3797111 and 3805589. https://snok.ai/en/news/blog/sap-security-patch-day-october-2026/?utm_source=x&utm_medium=social&utm_campaign=patch-day-2026-10&utm_content=snoksec
🚨Critical - SAP Cloud SDK for Python OAuth2 SSRF via tenant_subdomain Redirect (CVE-2026-89111) SAP Cloud SDK for Python’s OAuth2 token retrieval uses the tenant_subdomain parameter to build the token endpoint; if attacker-controlled in multi-tenant SAP BTP apps, it can SSRF token requests to an attacker server and leak client_id/client_secret. Single-tenant apps without user-influenced tenant_subdomain are not impacted. 👉Affected: sap-cloud-sdk (SAP Cloud SDK for Python) versions unknown
SAP Cloud SDK for Python に CVSS 10.0 の SSRF（CVE-2026-89111）。OAuth2 のクライアント認証情報が漏れるおそれがあります。sap-cloud-sdk 0.45.2 未満を使っていれば更新を。 https://cve.autoarticles.net/cve/CVE-2026-89111