SAP

Disclosed Jul 17, 2024Unverified

SAPwned: SAP AI Core flaws gave researchers access to customer cloud keys and AI artifacts

Wiz researchers ran malicious training jobs on SAP AI Core and chained isolation flaws to gain cluster admin rights, read and modify SAP container images and artifacts, and reach customers' private files and AWS, Azure and HANA credentials. SAP fixed the issues and Wiz said no customer data was compromised.

What is known

People affected	Not stated in the sources we have
Disclosed	Jul 17, 2024
Attack	Exposed data
Data exposed	Credentials and tokensAPI keysTraining data
Sector	Tech · DE
Status	Unverified: not yet confirmed by an official notice, a filing or the organization

Sources

Newswiz.io

SAPwned: SAP AI vulnerabilities expose customers' cloud environments and private AI artifacts

Notices filed

TotalJul 17, 2024

ResearchCount not stated

Other breaches at SAP

Official SAP npm packages trojanized to steal developer credentialsSupply chain exposed credentials and tokens and API keys.Supply chainTechDEUnverifiedApr 29

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about SAP