One SDK parameter could reroute your OAuth secrets to an attacker. SAP gave it a CVSS 10.0.

CVE-2026-89111 landed on October 13, and it is the kind of bug that makes you stare at your own codebase for a minute. The SAP Cloud SDK for Python, which a lot of multi-tenant SAP Business Technology