importantSYS.SOURCE: The Hacker News• 2026-10-13T22:58:50+05:30

SAP Identifies Critical CVSS 10 Vulnerability in Cloud SDK for Python Permitting OAuth2 Credential Theft

#sap #python #oauth2 #vulnerability #security

A critical CVSS 10 vulnerability in SAP's Cloud SDK for Python enables unauthorized theft of OAuth2 client credentials by redirecting them to a malicious server. The flaw specifically impacts multi-tenant applications on SAP Business Technology Platform using the SDK, requiring attacker control over the tenant subdomain.

A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,

Read original article

*** END OF TRANSMISSION ***

> HELIX CARBON'S BLAST FURNACE POLLUTION RECYCLING TECHNOLOGY REDUCES IRON PRODUCTION COSTS > POSTERA SEEKS AI RESEARCHERS FOR AGENTIC SCIENCE IN DRUG DISCOVERY > FBI ARRESTS OPENAI EMPLOYEE FOR UNAUTHORIZED SURVEILLANCE IN CONFERENCE ROOM > COURT COMPELS OPENAI TO DISCLOSE HIRING RECORDS IN APPLE TRADE SECRETS LITIGATION > OPENAI ENGINEER ARRESTED FOR BUGGING EXECUTIVE CONFERENCE ROOM WITH HIDDEN AUDIO RECORDER > CAMBRIDGE HEAVY INDUSTRIES DEVELOPS COMPACT FUSION DEVICE IN STEALTH MODE > LICUBE DEVELOPS LITHIUM-6 PURIFICATION TECHNOLOGY FOR FUSION ENERGY INDUSTRY > OPEN-SOURCE BENCHMARK FOR MEASURING AI CODE GENERATION EFFICIENCY > THE FOUR COLOR THEOREM AND THE CONTROVERSY OF COMPUTER-ASSISTED PROOFS > VIRTUAL GUITAR PLATFORM ENABLES KEYBOARD-DRIVEN MUSIC CREATION AND LEARNING> HELIX CARBON'S BLAST FURNACE POLLUTION RECYCLING TECHNOLOGY REDUCES IRON PRODUCTION COSTS > POSTERA SEEKS AI RESEARCHERS FOR AGENTIC SCIENCE IN DRUG DISCOVERY > FBI ARRESTS OPENAI EMPLOYEE FOR UNAUTHORIZED SURVEILLANCE IN CONFERENCE ROOM > COURT COMPELS OPENAI TO DISCLOSE HIRING RECORDS IN APPLE TRADE SECRETS LITIGATION > OPENAI ENGINEER ARRESTED FOR BUGGING EXECUTIVE CONFERENCE ROOM WITH HIDDEN AUDIO RECORDER > CAMBRIDGE HEAVY INDUSTRIES DEVELOPS COMPACT FUSION DEVICE IN STEALTH MODE > LICUBE DEVELOPS LITHIUM-6 PURIFICATION TECHNOLOGY FOR FUSION ENERGY INDUSTRY > OPEN-SOURCE BENCHMARK FOR MEASURING AI CODE GENERATION EFFICIENCY > THE FOUR COLOR THEOREM AND THE CONTROVERSY OF COMPUTER-ASSISTED PROOFS > VIRTUAL GUITAR PLATFORM ENABLES KEYBOARD-DRIVEN MUSIC CREATION AND LEARNING