Project
SAP's flagship ERP suite, launched in 2015 and built on the HANA in-memory database as the successor to SAP ECC; runs on-premise or in the cloud.
SAP's ABAP MCP Server, generally available after Sapphire 2026, lets Claude, Copilot or Amazon Q execute RFCs on S/4 through one /mcp endpoint. Each agent needs its own bearer token, a dev.to practitioner guide says, so S/4 teams have to decide what every token may call.
Reality
Onapsis, which found the flaw alongside SAP, rates it CVSS 10.0 and recommends immediate patching. A second kernel note in the same batch reaches every S/4HANA 2025 system and any older release already on a current kernel.
Reality
SAP shipped Security Note 3747649 on September 8 for CVE-2026-44756, a memory corruption bug in Extended Passport processing that Onapsis says gives unauthenticated callers command execution as the account owning the SAP install.
Reality
Ivan Mans of SecurityBridge says the SAP security question is now what an agent already inside the system is allowed to do and whether anyone can prove it afterward. His incident record comes from developer tooling.
Reality
Onapsis says the OVERPASS overflow fires while the SAP kernel processes an Extended Passport at session initiation, which happens before authentication or logon policy is consulted. That leaves reachability and patch state as the only variables.
Reality