--- title: "SAP patches a 10-out-of-10 flaw that can send AI agents' credentials to attackers; earnings due October 21" description: "SAP's October patch day closed CVE-2026-89111, a CVSS 10.0 flaw able to hand an outsider the OAuth2 credentials its AI agents use inside customer systems. The stock trades on AI delivery at 28.6 times earnings and reports on October 21." publisher: "The Inference" section: "Safety" published: 2026-10-14T17:18:14.208Z modified: 2026-10-14T17:18:14.208Z canonical: https://theinference.org/article/sap-patches-a-10-out-of-10-flaw-that-can-send-ai-agents-credentials-to-attackers-earnings-due-october-21 language: en keywords: "Security, SAP, AI Agents, Enterprise Software, Earnings" --- # SAP patches a 10-out-of-10 flaw that can send AI agents' credentials to attackers; earnings due October 21 > SAP's October patch day closed CVE-2026-89111, a CVSS 10.0 flaw able to hand an outsider the OAuth2 credentials its AI agents use inside customer systems. The stock trades on AI delivery at 28.6 times earnings and reports on October 21. ## One URL parameter carried the keys [SAP](https://theinference.org/markets/companies/sap)'s October patch day shipped 22 new and updated security notes on October 13, 2026, four of them rated critical [1]. The worst is [CVE-2026-89111, a server-side request forgery scored 10.0](https://nvd.nist.gov/vuln/detail/CVE-2026-89111) out of 10 on the standard severity scale, fixed in version 0.45.2 of the Cloud SDK for Python, SAP's official toolkit for building AI agents and Python applications on its Business Technology Platform cloud [1][2][4]. The SDK takes a value called tenant_subdomain to name the customer a request belongs to. Hand it a crafted value and the SDK builds its token request around that value, [sending the application's OAuth2 client ID and secret](https://github.com/SAP/cloud-sdk-python/security/advisories/GHSA-4mv3-jxxm-9cx2), the standing credentials software uses to authenticate on SAP's cloud, to a server the attacker controls [2]. No login, no privileges and no user trickery are needed [3]. The timing lands on money. SAP trades at 28.6 times earnings, the stock at $220.10 against a $264.71 average analyst target, and reports third-quarter results after the close on October 21: [consensus $2.04 a share on $11.45 billion of revenue](https://www.marketbeat.com/instant-alerts/upcoming-sap-sap-projected-to-announce-quarterly-earnings-on-wednesday-2026-10-14/), after July's quarter missed at $1.82 against a $2.00 estimate [5]. ## The fix shipped in August and slipped back in September The validation check that blocks crafted subdomains first arrived on August 21, in version 0.45.2, listed under bug fixes with no mention of security; the advisory followed 53 days later [6]. Until that release, no version of the SDK had the check [6]. Six releases published between September 10 and 18, versions 0.53.0 through 0.55.0, moved token handling for the Destination service module onto new shared code that skipped the check [6]. Two releases on the older 0.36 line, published after the August fix, never had it [6]. The advisory lists nothing above 0.45.2 as affected, and neither it nor the release notes say whether the six September releases fall under this CVE, or whether applications that ran them should replace their credentials [6]. The newest release, 0.58.4, passes all eleven of SAP's own tests [6]. ## SAP's worst bugs get used within days The patch matters because SAP's recent criticals do not stay theoretical. August's maximum-severity flaw in Commerce Cloud was [flagged as actively exploited days after its fix](https://www.bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-oauth2-ssrf-security-flaw/) [4]. September's CVE-2026-44756 sat exposed on more than 10,000 internet-facing systems by the count of Onapsis, the security firm that reported it [4]. CISA, the US cyber agency, holds 14 SAP flaws in its exploited-vulnerabilities catalog dating to November 2021, three tied to ransomware [4]. ## The premium the flaw lands on Underneath the security noise, the business keeps compounding: revenue has beaten its year-ago quarter for twelve straight quarters, $11.2 billion in the June quarter [7]. The next reading arrives with the October 21 earnings report, where analysts expect $11.45 billion [5]. *Chart: **Revenue has beaten its year-ago quarter for 12 straight quarters; the next reading lands October 21** Line chart of SAP quarterly revenue from Q3 2023 through Q2 2026 with a dashed estimate point for Q3 2026 at $11.45 billion, showing a rising trend throughout.* *Quarterly revenue in US$ billions as filed with the SEC, calendar quarters. Q3 2026e is analyst consensus via MarketBeat, not a reported figure. [5][7]* ## No attacks named yet, and October 21 prices the premium No exploitation of the new flaw is confirmed, and it is not on CISA's catalog [8]. SAP [shipped a patch and a workaround](https://www.securityweek.com/sap-patches-critical-netweaver-s-4hana-vulnerabilities/), an allowlist of registered tenant subdomains [2]. The bull case leans on 26 percent growth in current cloud backlog, cloud contracts signed but not yet booked as revenue, and on Joule, SAP's AI assistant, reported to lift productivity by up to 20 percent [5]. Neither number takes back a credential already delivered to the wrong server. The advisory leaves the decision to replace possibly exposed credentials to each customer [6]. Any application still running an unfixed release can have its agent's credentials sent to an attacker's server by one crafted parameter [2]. The stock already traded 27 percent below its peak in September, on doubts about the AI roadmap, with a buyback running underneath [9]. Two readings settle the week: whether CVE-2026-89111 is used within days of its fix, as August's Commerce Cloud flaw was, and whether the October 21 earnings report shows cloud revenue carrying the premium [4]. ## Takeaway A CVSS 10.0 flaw in SAP's Cloud SDK for Python can send AI agents' OAuth2 credentials to an attacker's server; SAP patched it October 13, its record says criticals get used within days, and earnings due October 21 price the AI premium at 28.6 times earnings. ## Sources 1. [SecurityWeek, "SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities", 13 October 2026](https://www.securityweek.com/sap-patches-critical-netweaver-s-4hana-vulnerabilities/) 2. [SAP GitHub security advisory GHSA-4mv3-jxxm-9cx2, "OAuth2 SSRF vulnerability in SAP Cloud SDK for Python", published 13 October 2026](https://github.com/SAP/cloud-sdk-python/security/advisories/GHSA-4mv3-jxxm-9cx2) 3. [US National Vulnerability Database, "CVE-2026-89111 Detail", published 12 October 2026](https://nvd.nist.gov/vuln/detail/CVE-2026-89111) 4. [BleepingComputer, "SAP warns of maximum severity OAuth2 SSRF security flaw", 13 October 2026](https://www.bleepingcomputer.com/news/security/sap-warns-of-maximum-severity-oauth2-ssrf-security-flaw/) 5. [MarketBeat, "SAP (SAP) Projected to Announce Quarterly Earnings on Wednesday", 14 October 2026](https://www.marketbeat.com/instant-alerts/upcoming-sap-sap-projected-to-announce-quarterly-earnings-on-wednesday-2026-10-14/) 6. [The Hacker News, "SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft", 13 October 2026](https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html) 7. [SAP SE, quarterly figures from its SEC filings, retrieved 14 October 2026](https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001000184) 8. [Rescana, "Critical CVE-2026-89111 SSRF Vulnerability in SAP Cloud SDK for Python Threatens SAP BTP OAuth2 Security", 14 October 2026](https://www.rescana.com/post/critical-cve-2026-89111-ssrf-vulnerability-in-sap-cloud-sdk-for-python-threatens-sap-btp-oauth2-security) 9. [ad-hoc-news, "SAP's Patch Day Flags Two Critical Holes as Buyback Presses On and the Stock Sits 27% Under Its Peak", 11 September 2026](https://www.ad-hoc-news.de/boerse/news/unternehmensnachrichten/sap-s-patch-day-flags-two-critical-holes-as-buyback-presses-on-and-the-stock-sits-27-prozent-under/70088516) --- SAP patches a 10-out-of-10 flaw that can send AI agents' credentials to attackers; earnings due October 21 — The Inference. Canonical: https://theinference.org/article/sap-patches-a-10-out-of-10-flaw-that-can-send-ai-agents-credentials-to-attackers-earnings-due-october-21