Threats affecting pkg:pypi/sap-cloud-sdk-python

CVE-2026-120013 is a path traversal vulnerability in the SAP Cloud SDK for Python's agent_memory module prior to version 0.50.0. The vulnerability arises because the tenant parameter in create_client was not validated, allowing an attacker to craft a path that escapes the intended directory and access secrets belonging to other tenants. This could lead to unauthorized access to sensitive credentials such as OAuth client IDs and client secrets. The issue is fixed in version 0.50.0.