CVE-2026-112110 · Other
NO FIX YET · SEE WHAT TO DO
A time-of-check to time-of-use race in the SafeNet Authentication Client log-cleanup routine lets a logged-in non-admin local user redirect a privileged file deletion outside the log directory. An attacker can use this to delete files the service should not touch.
first public Nov 5, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Only machines running SafeNet Authentication Client releases up to and including 10.9 R3 GA (build 10.9.7449) are affected. The attacker needs a local, non-administrator account on the machine, so exposure is limited to shared or multi-user Windows hosts where the client is installed.
Not affected if client-not-installed, no-local-untrusted-users
Who cares sac, safenet-authentication-client, windows
10.9 R3 GA, build 10.9.7449)10.9 R3 GA (build 10.9.7449); the fixed version is not stated in the sourcesA time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory.
This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).
This page as .md · .json · CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.