SAP S/4HANA’s Linear Asset Management RAP Business Object does not enforce sufficient instance‑level authorization checks for certain modification operations. An attacker who possesses low‑privilege local credentials can exploit this gap to change data on objects that they are not authorized to modify, resulting in direct loss of data integrity while confidentiality and availability remain unaffected.

All installations of SAP S/4HANA Linear Asset Management RAP Business Object that have not applied the latest security update are vulnerable. The affected product is the SAP S/4HANA Linear Asset Management RAP Business Object, which is part of the SAP S/4HANA suite and can be found under the Linear Asset Management RAP module.

The CVSS score of 4.7 classifies the issue as moderate in severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires local system access coupled with low privileges, making the attack vector local. Because local accounts can be compromised in many production environments, the potential for exploitation remains moderate, particularly where local account controls are weak.