Vulnerability · Published Nov 5, 2026 · Assigned by THA-PSIRT

CVE-2026-112110Privileged file deletion in SafeNet Authentication Client SACSrv

Medium 6.3

In plain English

A medium-severity security flaw in Safenet Authentication Client Service from Thalesgroup. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.1%top 98.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory. This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).

Affected products (as reported)

Vendor	Product	Versions
Thalesgroup	Safenet Authentication Client Service	0 – through 10.9.7449

Weakness: CWE-59, CWE-367 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

References

https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=ab05ca862b505350cdc1f87df291bfce&sysparm_article=KB0031249 vendor-advisory