A vulnerability (CVE-2026-120012) was discovered in the SAP Cloud SDK for AI (JavaScript), allowing an attacker to obtain sensitive authentication credentials from error messages generated under specific conditions. This occurs when a low-privileged user accesses logs or forwarded error output after a failure event triggered by a higher-privileged user. The attacker must wait for the token's limited lifetime to exploit the vulnerability, which could result in a high impact on confidentiality, integrity, and availability. This vulnerability matters to AI developers and operators as it may allow unauthorized access to sensitive credentials, compromising system security and potentially leading to data breaches or service disruptions.