Privilege Escalation Vulnerability in SAP Just In Time by SAP

CVE-2025-26655

Summary

The SAP Just In Time product contains a vulnerability where it fails to enforce proper authorization checks for authenticated users. This flaw allows an attacker to gain elevated privileges that are normally restricted, which could potentially compromise the integrity of the application. It is important to note that this vulnerability does not impact the confidentiality or availability of the system. Organizations using SAP Just In Time should ensure they are aware of this issue and apply necessary mitigations as outlined in the official SAP security notes.

References