SAP’s October 2026 security updates fix 20 flaws across several products, including a maximum-severity bug in the SAP Cloud SDK for Python, the toolkit SAP provides for building AI agents and Python applications on its Business Technology Platform (BTP). Tracked as CVE-2026-89111 (CVSS 10.0), it is an OAuth2 server-side request forgery (SSRF) flaw that remote attackers can exploit without privileges or user interaction.
According to the project’s advisory, an attacker who controls the tenant_subdomain value in a multi-tenant BTP application can redirect the SDK’s OAuth2 token requests to a server they run, which causes the application’s client credentials to be sent to the attacker. BleepingComputer’s reporting does not say the flaw is being exploited. The same patch day also addresses CVE-2026-89110, a critical broken access control issue in SAP NetWeaver Visual Composer that could let remote attackers with limited privileges fully compromise a vulnerable system, and CVE-2026-89108, a critical flaw in SAP Manufacturing Integration and Intelligence that lets an attacker who already has administrator privileges gain admin control of the underlying system.
How to check if you’re affected
Affected products are applications built on SAP Cloud SDK for Python versions older than 0.45.2, particularly multi-tenant BTP applications that pass a user- or request-supplied tenant_subdomain into SDK calls. Check the installed package version (for example with pip show in the application’s environment) and upgrade to 0.45.2 or later, which validates the subdomain against RFC 1123 DNS label rules before building the token URL.
If you cannot upgrade yet, the advisory’s workaround is to validate tenant_subdomain against an allowlist of registered tenant subdomains before it reaches any SDK call. If an affected version was exposed to untrusted input, consider rotating the OAuth2 client credentials the application uses. For the other two critical flaws, match your Visual Composer and Manufacturing Integration and Intelligence installations against SAP’s October 2026 security notes.