CVE-2026-112110: Privileged file deletion in SafeNet Authentication Client SACSrv
A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory.
This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SafeNet Authentication Clientto a version that resolves this vulnerability.Fixed in 10.9.7954
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running SafeNet Authentication Client releases up to and including 10.9 R3 GA (build 10.9.7449) are affected. Exploitation requires an authenticated local user with non-administrator privileges.
What access and conditions does an attacker need?
An attacker needs local authenticated access as a non-administrator and must successfully exploit a race condition in the SACSrv log-cleanup operation. The issue redirects a privileged deletion outside the intended log directory.
What is the likely impact of successful exploitation?
A successful exploit can cause a privileged file deletion operation to delete a file outside the intended log directory. The provided severity vector indicates integrity and availability impact, with no confidentiality impact.