SAP Cloud SDK for Python vulnerabilities

2 known vulnerabilities in SAP Cloud SDK for Python from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SAP Cloud SDK for Python: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-120013Nov 10, 2026SAP

  The agent_memory module accepts a caller-supplied tenant parameter in create_client(tenant=...). Prior to version 0.50.0, the tenant parameter was not validated before being used to construct filesystem paths for secret resolution. A value containing path trav

• 7.5 High severity

  SAP Cloud SDK for Python: Improper Verification of Cryptographic Signature

  CVE-2026-109799Nov 10, 2026SAP

  The SAP Cloud SDK for Python contains an improper cryptographic signature verification vulnerability (CWE-347) in IASContextProvider, the runtime-context provider registered by default via bootstrap(app).IASContextProvider extracted the app_tid, sap_gtid and u