{"affected":[{"defaultStatus":"unaffected","product":"SAP/astonish","source":"CNA: sap","vendor":"SAP_SE","versions":[{"status":"affected","version":"<v3.6.0"}]}],"cveId":"CVE-2026-109797","cwes":["CWE-1220"],"description":"In SAP/astonish, an authenticated user could potentially identify and operate on another team�s sandbox containers because of improper tenant isolation in the legacy Incus sandbox-management API handlers. The affected handlers did not use the tenant-aware session lookup path, allowing cross-tenant container operations such as listing, exposing or proxying, and deleting containers.The issue affects only the legacy Incus backend. Kubernetes and OpenShell deployments are not affected because the relevant Incus-specific handlers are unavailable there.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.1,"severity":"high","source":"CNA: sap","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","version":"3.1"}],"modifiedAt":1794272632532,"publishedAt":1794272632532,"references":[{"source":"CNA: sap","tags":[],"url":"https://github.com/SAP/astonish/security/advisories/GHSA-93c9-96j8-4vg9"},{"source":"CNA: sap","tags":[],"url":"https://url.sap/sapsecuritypatchday"}],"remediation":[],"revision":"098a130e9460151393c7639f593573554c08fce8defbb270efdc2a8215f17b01","sources":[{"modifiedAt":1794272632532,"name":"CNA: sap","retrievedAt":1794276497574,"url":"https://www.cve.org/CVERecord?id=CVE-2026-109797"}],"ssvc":null,"status":"published","title":"Cross-tenant sandbox takeover in SAP/astonish","updatedAt":1794276497574}