What is CVE-2026-58239?

CVE-2026-58239 is a low-severity vulnerability in Sap_se Sap Business Ai Platform (Approuter), classified under CWE-807. CVSS score: 3.7/10. Published 2026-08-11.

How severe is CVE-2026-58239?

Low severity. CVSS v3 base score is 3.7 out of 10.

Vulnerability in Sap_se Sap Business Ai Platform (Approuter)

CVE-2026-58239

SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send specially crafted requests to spoof the tenant context under conditions not fully within their control. Successful expl…

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Sap_se Sap Business Ai Platform (Approuter) — versions SAP Approuter node.js package < 23.0.0

Weakness classification (CWE)

CWE-807

References

cna@sap.com
cna@sap.com

Frequently asked questions

What is CVE-2026-58239?: CVE-2026-58239 is a low-severity vulnerability in Sap_se Sap Business Ai Platform (Approuter), classified under CWE-807. CVSS score: 3.7/10. Published 2026-08-11.
How severe is CVE-2026-58239?: Low severity. CVSS v3 base score is 3.7 out of 10.