The Hacker News (Security) Oct 13, 2026 · 5:28 PM · 1 min read

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,

This is a summary aggregated from The Hacker News (Security). Read the complete article on the original site:

Read full article at The Hacker News (Security)

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

More Programming & Dev News

Receipt Box: a private receipt sorter for freelancers, powered by Gemma

Building a Simple Concrete Volume Formula: Cubic Yards from Feet and Inches

A CDK L2 Construct for AWS Lambda Web Functions

Three Ways mmWave Fall Detection Goes Wrong (and Why 'Detects Falls' Is Not a Spec)

creative coding with embedded javascript: running p5-style algorithmic art inside a native c++ daw

How I built a SaaS in a weekend with Claude + Next.js — the honest breakdown