SAP October 2026 Patch Day: CVE-2026-89111 (CVSS 10.0) OAuth2 SSRF in SAP Cloud SDK for Python leaks BTP client credentials in multi-tenant apps; fix 0.45.2
SAP's 13 October 2026 Security Patch Day lists 16 new security notes and 4 GitHub security advisories, led by CVE-2026-89111 (GHSA-4mv3-jxxm-9cx2), rated Critical 10.0. SAP says the Cloud SDK for Python, its official toolkit for Python apps and AI agents on SAP Business Technology Platform (BTP), has an OAuth2 server-side request forgery flaw affecting multi-tenant BTP applications: an attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to a server they control and capture the application's client credentials. Versions before 0.45.2 are affected. The same patch day also rates as Critical CVE-2026-89110 (9.9, broken access control in NetWeaver Visual Composer VC70RUNTIME 7.50), CVE-2026-89107 (9.9, code injection in S/4HANA Manage Substitution/Validation Rules, S4CORE 105 to 109) and CVE-2026-89108 (9.1, missing authorisation in Manufacturing Integration and Intelligence Configuration Service). SAP has not marked any of these as exploited.
- Product
- SAP Cloud SDK for Python (sap-cloud-sdk) used by multi-tenant SAP BTP applications
- Versions
- Affected: sap-cloud-sdk before 0.45.2. Fixed: 0.45.2.
- CVSS
- (SAP CNA, CVSS 3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N - Exploited in Australia?
- unknown
- Patch to
- Update sap-cloud-sdk to 0.45.2 or later and redeploy multi-tenant BTP apps. Until then, validate tenant_subdomain against an allowlist of registered tenant subdomains before any SDK call, as SAP advises. If an app was exposed, rotate its OAuth2 client credentials. Apply the other October Critical notes (Visual Composer, S/4HANA, MII) through your normal SAP patch cycle.
Primary: SAP Security Patch Day — October 2026 (13 Oct 2026) · Vendor: SAP Cloud SDK for Python — GHSA-4mv3-jxxm-9cx2 / CVE-2026-89111 · CVE: CVE-2026-89111, CVE-2026-89110, CVE-2026-89107, CVE-2026-89108 · BleepingComputer — SAP warns of maximum severity OAuth2 SSRF security flaw (13 Oct 2026)