CVE-2026-120013

A tenant value could select another tenant’s agent-memory credentials

SAP · Cloud SDK for Python agent memory module

First documented disclosure · Review checkpoint

Summary

A multi-tenant application could resolve a caller-supplied tenant value to the wrong mounted secrets.

Severity and exploitation evidence

High · 7.5/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed sources describe the vulnerability and its conditions. They do not identify malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The SDK constructed a credential directory from the supplied tenant without first validating its boundaries.

Conditions required

An application accepts an untrusted tenant value and mounts other tenants’ secrets where the process can access them.

Potential impact

Another tenant’s OAuth credentials could be exposed, potentially granting access to its agent-memory service.

Affected versions and configurations

Before 0.50.0.

Fix and mitigation status

0.50.0.

Practical next steps

Upgrade to 0.50.0. SAP recommends an allowlist of registered tenant subdomains while an upgrade is pending.

Operating lesson

Verify tenant identity before resolving tenant-specific secret storage.

Evidence and limits

The impact depends on an application’s tenant input and mounted credentials. The advisory identifies no affected customer.

Sources