What happened
The agent_memory module builds filesystem paths from the caller-supplied tenant parameter without validation, so a traversal value points secret resolution outside the intended directory. CVSS 7.5.
Why it matters
agent_memory resolves secrets for AI agent memory storage. An unvalidated tenant parameter that controls a file path is a route to read or overwrite secrets/agent memory files outside the intended area.
Attack vector
create_client(tenant=...) accepts a caller-supplied tenant parameter that is not validated before being used to construct filesystem paths for secret resolution. A value containing path traversal sequences can escape the intended secret directory.
Affected systems
SAP cloud-sdk-python agent_memory module before 0.50.0
Mitigation
Upgrade the SAP cloud-sdk-python agent_memory module to 0.50.0 or later (GitHub GHSA-28c8-457r-4cf6).