SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
SAP disclosed on October 13 that a flaw in its Cloud SDK for Python, tracked as CVE-2026-89111 with a CVSS score of 10.0, can send an application's OAuth2 client ID and client secret to an attacker-controlled server when the application passes a tenant...