Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-66774 EUVD-2026-55886GHSA-82g4-h784-m68h

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

Published Aug 11, 2026 · Updated Aug 11, 2026 · Assigned by sap

Description

SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's control. This could result in a low impact on availability. There is no impact on confidentiality and integrity.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Business AI Platform (Approuter) SAP Approuter node.js package < 23.0.0 —

Advisories 1

References