A vulnerability (CVE-2026-120012) was discovered in the SAP Cloud SDK for AI (JavaScript), specifically in its Node.js implementation. The issue arises when sensitive authentication credentials are inadvertently included in error messages generated during certain internal operations under specific failure conditions. An attacker can obtain these credentials from application logs or error output, but requires a low-privilege user account and a suitable failure event triggered by a higher-privileged user. Exploitation is complex due to the limited lifetime of the token. Successful exploitation could allow an attacker to reuse the credentials, impacting confidentiality, integrity, and availability of the associated SAP service.