CVE-2026-120013
Received Received - Intake

Path Traversal in SAP HANA Agent Memory Module

Publication date: 2026-11-10

Last updated on: 2026-11-10

Assigner: SAP SE

Description
The agent_memory module accepts a caller-supplied tenant parameter in create_client(tenant=...). Prior to version 0.50.0, the tenant parameter was not validated before being used to construct filesystem paths for secret resolution. A value containing path traversal sequences (for example, attacker-corp/../victim-corp) could cause the resolved path to escape the intended directory and access another tenant's secrets under:Plain Text/etc/secrets/appfnd/hana-agent-memory/<tenant>/Successful exploitation could allow unauthorized access to another tenant's mounted credentials, including OAuth client IDs and client secrets. This vulnerability could enable cross-tenant access to sensitive credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-10
Last Modified
2026-11-10
Generated
2026-11-10
AI Q&A
2026-11-10
EPSS Evaluated
N/A
NVD
CVE-2026-120013
EUVD
EUVD-2026-120852

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sap cloud_sdk_for_python to 0.50.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the SAP Cloud SDK for Python's agent_memory module. Before version 0.50.0, the create_client function did not validate the tenant parameter, allowing path traversal sequences like attacker-corp/../victim-corp to manipulate filesystem paths. This could cause the resolved path to escape the intended directory and access another tenant's secrets stored under /etc/secrets/appfnd/hana-agent-memory/<tenant>/. Successful exploitation grants unauthorized access to sensitive credentials such as OAuth client IDs and secrets.

Detection Guidance

Check the version of SAP Cloud SDK for Python. If it is below 0.50.0, the system is vulnerable. Commands: pip show sap-cloud-sdk-python or pip list | grep sap-cloud-sdk-python.

Impact Analysis

An attacker could exploit this to access another tenant's secrets, including OAuth credentials, potentially leading to unauthorized access to sensitive data or systems. The vulnerability requires no privileges or user interaction and can be triggered remotely, making it highly impactful for multi-tenant environments using the affected SDK versions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. It may result in data breaches, non-compliance with data protection regulations, and potential legal or financial penalties due to exposure of personal or health-related information.

Mitigation Strategies

Upgrade SAP Cloud SDK for Python to version 0.50.0 or later. As a temporary measure, validate tenant values against an allowlist of registered tenant subdomains before passing them to SDK APIs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120013. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...