@SAP-AI-SDK/AI-API · CVE-2026-120012 · AI agents & MCP
FIX → 2.18.0 ✓ verified
The SAP Cloud SDK for AI for Node.js can place sensitive authentication credentials into error messages produced by some internal operations when specific failures occur. An attacker with low privileges who can read application logs or forwarded error output could reuse the exposed credentials against the associated SAP service.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Node.js applications that use @sap-ai-sdk/ai-api version 2.17.0 or older and whose logs or forwarded error output can be read by low-privileged users. Exploitation needs a failure triggered by a higher-privileged user and must happen within the token's short lifetime. Apps that do not use the package, are on 2.18.0+, or keep logs strictly restricted can skip it.
Not affected if logs-restricted, patched-2.18.0, sdk-not-used
Who cares ai-sdk, node.js, npm, sap, sap-cloud-sdk-for-ai
SAP Cloud SDK for AI (Node.js) could inadvertently include sensitive authentication credentials in error messages generated by certain internal operations under specific failure conditions. An attacker with low privileges and access to application logs or forwarded error output could obtain these credentials, but only after waiting for a suitable failure event triggered by a higher-privileged user and within the limited lifetime of the token, making exploitation complex. Successful exploitation could allow the attacker to reuse the disclosed credentials against the associated SAP service, resulting in a high impact on confidentiality, integrity and availability.
This page as .md · .json · CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Upgrade to 2.18.0
2.18.0 or later (npm install @sap-ai-sdk/ai-api@2.18.0)