Input Validation Flaw in SAP Host Agent

CVE-2026-120015

What is CVE-2026-120015?

The SAP Host Agent contains an input validation vulnerability that allows an attacker with limited privileges to exploit a flaw in the function that handles specific inputs. This security issue can lead to malicious file execution under a privileged account, enabling the attacker to execute persistent code. Such an exploit can significantly compromise the confidentiality, integrity, and availability of the affected systems, necessitating immediate attention from users to mitigate potential risks.

References