CVE-2026-120013: Path Traversal in Agent Memory Module of SAP Cloud SDK for Python
The agentmemory module accepts a caller-supplied tenant parameter in createclient(tenant=...). Prior to version 0.50.0, the tenant parameter was not validated before being used to construct filesystem paths for secret resolution. A value containing path traversal sequences (for example, attacker-corp/../victim-corp) could cause the resolved path to escape the intended directory and access another tenant's secrets under:Plain Text/etc/secrets/appfnd/hana-agent-memory/<tenant>/Successful exploitation could allow unauthorized access to another tenant's mounted credentials, including OAuth client IDs and client secrets. This vulnerability could enable cross-tenant access to sensitive credentials.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SAP Cloud SDK for Pythonto a version that resolves this vulnerability.Fixed in 0.50.0
Event History
Frequently Asked Questions
Which releases are affected?
Versions of SAP Cloud SDK for Python before 0.50.0 are affected. Upgrade to version 0.50.0 or later.
What does an attacker need to exploit this issue?
An attacker needs to be able to supply the tenant value passed to agent_memory create_client(tenant=...). Path traversal sequences in that value can make secret resolution target a different tenant directory.
What information could be exposed?
The issue can expose another tenant's mounted credentials from the hana-agent-memory secret path. This includes OAuth client IDs and client secrets.
How can I assess whether an environment may be exposed?
Check whether the deployment uses the agent_memory module on a version earlier than 0.50.0 and whether untrusted callers can influence the tenant argument supplied to create_client. Exposure is relevant where tenant-specific credentials are mounted under /etc/secrets/appfnd/hana-agent-memory/<tenant>/.