# SAP Patches CVSS 10 Flaw in Cloud SDK for Python That Leaks OAuth2 Credentials

SAP disclosed a maximum-severity (CVSS 10) vulnerability in its Cloud SDK for Python that could let attackers steal OAuth2 credentials and gain access to connected cloud services. The flaw affects applications built with the SDK, potentially exposing sensitive business data and enterprise systems. SAP has released fixes, and organizations using the library should update immediately.

**Importance:** 4/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/10/sap-discloses-critical-cvss-10-flaw-in.html) — Tue, 13 Oct 2026 22:58:50 +0530