Six SAP Cloud SDK for Python releases skip tenant checks in Destination calls, enabling OAuth2 client secret leaks if attackers control tenant names.

SAP has patched a maximum-severity flaw in its Cloud SDK for Python that could expose OAuth credentials in multi-tenant BTP applications, alongside 19 other vulnerabilities in its October security ...

SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. The SAP Python SDK is the ...

Limiting API usage to “SAP-endorsed architectures, data services, or service-specific pathways,” SAP has encountered pushback from the DSAG user group over the scope and implications of the updated ...