CVE lookup

CVE-2026-89111

Pruva has a verified reproduction for CVE-2026-89111: SAP Cloud SDK for Python is vulnerable to OAuth2 SSRF that can exfiltrate client credentials when tenant_subdomain is attacker-controlled.. The canonical evidence record is REPRO-2026-00387.

REPRO

REPRO-2026-00387

Package

SAP/cloud-sdk-python · PyPI

Severity

CRITICAL

Status

published

Open verified reproduction Plain text for agents NVD source