Skip to content

An editorial team and a community building with AI

vibecoding.incJoin Discord ↗
← All articles

News · SAP · 2 min read

Event date: · Published:

SAP fixes four security flaws in its AI agent SDKs on Patch Day

SAP's November 2026 Patch Day addressed four GitHub Security Advisories in its open source AI and agent SDKs, including a JWT verification flaw and a path traversal bug in Agent Memory.

SAP published four GitHub Security Advisories for its open source AI and agent SDKs as part of its November 2026 Patch Day, announced on November 10, 2026, which also included 35 new security notes. The advisories cover improper JWT signature verification in IASContextProvider, a path traversal bug in the Agent Memory module, a credential leakage flaw in the JavaScript AI SDK, and a cross tenant sandbox takeover issue.

What changed

  • CVE-2026-109799 (GHSA-93m8-crj2-v997, CVSS 7.5): improper JWT signature verification in IASContextProvider in SAP Cloud SDK for Python, affecting versions before 0.63.1, let a remote caller submit a self-signed token naming a victim tenant or user, with the forged identity propagating into logs, audit events, and tenant routing.
  • CVE-2026-120013 (GHSA-28c8-457r-4cf6, CVSS 7.5): path traversal in the Agent Memory module of SAP Cloud SDK for Python, caused by create_client(tenant=...) not validating the caller-supplied tenant parameter, fixed in version 0.50.0.
  • CVE-2026-120012 (GHSA-8g7j-49xg-8wf3, CVSS 7.5): credential leakage and information disclosure flaw in SAP Cloud SDK for AI for JavaScript, fixed in version 2.18.0.
  • CVE-2026-109797 (GHSA-93c9-96j8-4vg9, CVSS 7.1): cross tenant sandbox takeover flaw in SAP/astonish.

What it means for AI builders

These vulnerabilities sit directly inside SAP's AI agent tooling, including its agent memory and cross tenant context modules, so any team building multi-tenant AI agents on SAP's SDKs could have had one tenant impersonate or read another's data. Teams running SAP Cloud SDK for Python, SAP Cloud SDK for AI for JavaScript, or SAP/astonish should check their installed version against the fixed release named in the relevant advisory.

Fixes and availability

All four advisories were published on November 10, 2026 on their respective SAP GitHub repositories: path traversal in the Agent Memory module of SAP Cloud SDK for Python, information disclosure in SAP Cloud SDK for AI (JavaScript), and cross tenant sandbox takeover in SAP/astonish. Fixed versions are 0.63.1 for the JWT flaw, 0.50.0 for Agent Memory, and 2.18.0 for the JavaScript SDK.

Sources

Written with AI assistance, strictly from the sources listed above. Before it went live, automated checks verified its dates, sources and every language edition.

SAP fixes four security flaws in its AI agent SDKs on Patch Day | vibecoding.inc