CVE-2026-89112 is a broken access control flaw in SAP SE's CLA-Assistant. A low-privileged authenticated user can read CLA signature records, including contributor information, for organisations they do not administer. Versions through 2.13.1 are affected. Upgrade to the patched release. https://www.cve.org/CVERecord?id=CVE-2026-89112 #infosec #cybersecurity