SAP patches Python SDK flaw that can leak client credentials

SAP has patched 20 security flaws in its October updates, including a maximum-severity vulnerability that lets remote attackers without privileges steal credentials from applications using its Cloud SDK for Python. The toolkit supports AI agents and Python applications on SAP's Business Technology Platform. The flaw, CVE-2026-89111, lets an attacker control the tenant_subdomain parameter and redirect OAuth2 token requests to an attacker-controlled server, leaking client credentials. Customers unable to patch immediately can validate that parameter against an allowlist of registered tenant subdomains. SAP also patched critical access-control flaws in NetWeaver Visual Composer and Manufacturing Integration and Intelligence; those require limited privileges and administrator privileges, respectively.