---
id: "CVE-2026-120012"
page: "https://infrastack.ai/live/CVE-2026-120012"
kind: "vulnerability"
aliases: ["CVE-2026-120012"]
title: "SAP Cloud SDK for AI (Node.js): error messages can leak authentication credentials"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "@sap-ai-sdk/ai-api", "fixed": ["2.18.0"], "affected": "<= 2.17.0", "ecosystem": "npm"}]
ecosystems: []
tags: ["ai-sdk", "ai-tooling", "node.js", "npm", "sap", "sap-cloud-sdk-for-ai"]
not_affected_if: ["logs-restricted", "patched-2.18.0", "sdk-not-used"]
published_at: "2026-11-10T09:17:22+00:00"
first_seen_at: "2026-11-10T09:21:08+00:00"
updated_at: "2026-11-10T09:22:39+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120012", "first_seen_at": "2026-11-10T09:21:08+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-10T09:22:39+00:00"}]
exploit_sources: []
---

# SAP Cloud SDK for AI (Node.js): error messages can leak authentication credentials

Link for people: https://infrastack.ai/live/CVE-2026-120012 (this .md is for agents)

The SAP Cloud SDK for AI for Node.js can place sensitive authentication credentials into error messages produced by some internal operations when specific failures occur. An attacker with low privileges who can read application logs or forwarded error output could reuse the exposed credentials against the associated SAP service.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- npm:@sap-ai-sdk/ai-api affected <= 2.17.0 fixed 2.18.0

## How to check

- Run npm ls @sap-ai-sdk/ai-api (also check lockfiles). Versions <= 2.17.0 are affected; 2.18.0 is patched.
- Also check if you use other @sap-ai-sdk packages that depend on ai-api; the advisory names only @sap-ai-sdk/ai-api.
- Review who can read application logs and forwarded error output, and search them for leaked tokens.

## Fix

Upgrade @sap-ai-sdk/ai-api to 2.18.0 or later (npm install @sap-ai-sdk/ai-api@2.18.0). The patch removes the destination from logged values. SAP states no workaround is available. Consider rotating credentials that may have appeared in logs.

## Timeline

- 2026-11-10T09:21:08+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120012
- 2026-11-10T09:22:39+00:00 analyst — Read SAP GHSA-8g7j-49xg-8wf3: @sap-ai-sdk/ai-api <= 2.17.0 affected, 2.18.0 patched (destination removed from logged values), no workaround. Other @sap-ai-sdk packages not named.

## Documents

- [advisory] Vendor advisory: github.com https://github.com/SAP/ai-sdk-js/security/advisories/GHSA-8g7j-49xg-8wf3

## From the sources

SAP Cloud SDK for AI (Node.js) could inadvertently include sensitive authentication credentials in error messages generated by certain internal operations under specific failure conditions. An attacker with low privileges and access to application logs or forwarded error output could obtain these credentials, but only after waiting for a suitable failure event triggered by a higher-privileged user and within the limited lifetime of the token, making exploitation complex. Successful exploitation could allow the attacker to reuse the disclosed credentials against the associated SAP service, resulting in a high impact on confidentiality, integrity and availability.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_