CVE-2026-89105: SAP/cloud-security-services-integration-library >=3.6.6, <4.1.1

Affected technology

SAP/cloud-security-services-integration-library · >=3.6.6, <4.1.1
SAP_SE

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An attacker can gain unauthorized access to the system by using tokens that should not be accepted, leading to a breach of security. Vendor/CNA’s CVSS 3.1 assessment (base score 4.2/10) rates confidentiality and integrity impact as low; availability impact as none.