CVE-2026-89111: OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenantsubdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Multi-tenant BTP applications using SAP Cloud SDK for Python are affected when an attacker can control the tenant_subdomain parameter.
What does an attacker need to exploit the vulnerability?
The attacker needs control over the tenant_subdomain parameter. No authentication or user interaction is required according to the supplied vector.
What is the likely impact of successful exploitation?
An attacker can redirect OAuth2 token requests to an attacker-controlled server and obtain the application's client credentials. The supplied severity vector indicates high confidentiality and integrity impact, with no availability impact.