GHSA-3pfj-q5fp-f9pxHighCVSS 7.5

SAP Host Agent does not sufficiently validate certain inputs. Under certain condition, an...

Published
November 10, 2026
Last Modified
November 10, 2026

🔗 CVE IDs covered (1)

📋 Description

SAP Host Agent does not sufficiently validate certain inputs. Under certain condition, an attacker with low privileges could abuse the affected functionality to influence an internal component into loading a malicious file under a privileged account. Successful exploitation could lead to persistent code execution, resulting in a high impact on confidentiality, integrity and availability.

🔗 References (4)