A path traversal vulnerability was discovered in the agentmemory module of SAP Cloud SDK for Python, affecting versions prior to 0.50.0. The vulnerability occurs when the createclienttenant parameter is not validated, allowing an attacker to construct a malicious path that escapes the intended directory and accesses another tenant's secrets. This could lead to unauthorized access to sensitive credentials, including OAuth client IDs and client secrets, between tenants. The vulnerability is significant for developers and operators of AI agents that use the SAP Cloud SDK for Python, as it poses a risk to the security of sensitive data and credentials.