Vulnerabilidades de SAP_SE SAP Cloud SDK for Python (CVE)

Registros CVE publicados para SAP_SE SAP Cloud SDK for Python, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

7.5Alta

CVE-2026-120013 hace 5 días

Path Traversal in Agent Memory Module of SAP Cloud SDK for Python

SAP_SE SAP Cloud SDK for Python

The agent_memory module accepts a caller-supplied tenant parameter in create_client(tenant=...). Prior to version 0.50.0, the tenant parameter was not validated before being used to construct filesystem paths for secret resolution. A value containing path tra…

7.5Alta

CVE-2026-109799 hace 5 días

Improper verification of JWT signature in IASContextProvider leads to tenant/user identity spoofing ( sap-cloud-sdk (pip))

SAP_SE SAP Cloud SDK for Python

The SAP Cloud SDK for Python contains an improper cryptographic signature verification vulnerability (CWE-347) in IASContextProvider, the runtime-context provider registered by default via bootstrap(app).IASContextProvider extracted the app_tid, sap_gtid and …