CVE-2026-120013 Path Traversal in Agent Memory Module of SAP Cloud SDK for Python

A vulnerability was discovered in the agentmemory module of the SAP Cloud SDK for Python prior to version 0.50.0. The module fails to properly validate the tenant parameter, allowing an attacker to manipulate the filesystem path and access another tenant's secrets. This can occur when a malicious tenant ID contains path traversal sequences, enabling unauthorized access to sensitive credentials such as OAuth client IDs and client secrets.

RSS Score 0 11/10/2026, 8:05:17 AM Original Source
Save an API key to vote.