SAP Cloud SDK for Python Advisory Rates an OAuth2 SSRF Flaw CVSS 10.0, With a Fix Listed as Version 0.45.2, Released August 21

Overview

A security advisory published on October 13, 2026 in the SAP Cloud SDK for Python repository rates an OAuth2 server-side request forgery (SSRF) flaw at the maximum CVSS score of 10.0. BleepingComputer reported the same day that SAP addressed 20 security flaws across multiple products in its October 2026 security updates, and that the Python SDK issue was the maximum-severity one among them.

What the Advisory Says

The GitHub advisory (identifier GHSA-4mv3-jxxm-9cx2) lists the following fields for the package it names as the pip package sap-cloud-sdk:

• CVE: CVE-2026-89111
• Severity: Critical, CVSS 10.0, with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
• Weakness: CWE-918, Server-Side Request Forgery
• Affected versions: earlier than 0.45.2
• Patched version: 0.45.2
• Credit: SunandM, listed as reporter
• Published: October 13, 2026

The advisory describes the problem as affecting multi-tenant applications on SAP’s Business Technology Platform (BTP). In its words, an attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated. The advisory page shows no Impact or References section. Its repository lists one published security advisory.

According to BleepingComputer, the SDK is the official toolkit for developing AI agents and Python applications on BTP services, and the flaw can be exploited by remote attackers without privileges. The outlet attributes the description to a Tuesday advisory.

Fix and Workaround

The advisory says version 0.45.2 validates the tenant_subdomain value against RFC 1123 DNS label rules before it is substituted into a URL. For applications that cannot update immediately, it suggests validating tenant_subdomain against a known allowlist of registered tenant subdomains before passing it to any SDK call.

The repository’s release page for v0.45.2 is dated August 21, 2026, at 14:04 UTC, about seven weeks before the advisory. Its notes say three functions now validate tenant subdomain values against RFC 1123 DNS label standards, and that invalid inputs such as those containing dots, spaces, underscores or slashes now produce an invalid-subdomain error. The release notes as read do not describe the change as a security fix. The releases list shows v0.58.4 dated October 13, 2026, at 09:44 UTC as the newest entry at the time of reading.

Separately, the notes for v0.58.3, dated October 9, 2026, describe a tenant token URL injection fix in the XsuaaAuthProvider class, which previously used a string replace that could substitute a value anywhere in a URL, including its path. Neither the advisory nor those notes say whether the two changes are connected.

What We Do Not Know

• Neither the advisory nor BleepingComputer, as read, reports exploitation in the wild.
• BleepingComputer’s article refers to patches in SAP’s October 2026 updates, while the advisory names 0.45.2 as the patched version and the release page for that version carries an August date. The sources do not explain the gap between the two dates.
• The advisory does not say how many deployments use the affected versions.
• BleepingComputer also lists CVE-2026-89110, a critical broken access control flaw in SAP NetWeaver Visual Composer, and CVE-2026-89108 in SAP Manufacturing Integration and Intelligence. Those are separate products and are not covered by this advisory.

Status as described here reflects the advisory and release pages as read on October 13, 2026.