Security incident: A critical vulnerability in SAP's Cloud SDK for Python allows attackers to steal OAuth2 client credentials from multi-tenant applications.

SAP disclosed a critical vulnerability in its Cloud SDK for Python that could allow attackers to steal OAuth2 client credentials from multi-tenant applications.

{"feed_item_id":"6e0e1b4f-58f6-47c3-b7de-d44eea9ceb39","feed_item_link":"https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html","analysis":{"mentioned_companies":["SAP"],"is_security_incident":true,"incident_type":"vulnerability","severity":"critical","summary":"A critical vulnerability in SAP's Cloud SDK for Python allows attackers to steal OAuth2 client credentials from multi-tenant applications.","confidence":1,"cve_ids":[]}}