Local Privilege Escalation Vulnerability in Thales SafeNet Authentication Client
CVE-2026-112109

7.3HIGH

Key Information:

Vendor

Thalesgroup

Status
Safenet Authentication Client Service
Vendor
CVE Published:
5 November 2026

What is CVE-2026-112109?

A local privilege escalation vulnerability exists in Thales SafeNet Authentication Client's service interface, which may be exploited by authenticated, non-administrator local users. By triggering a heap-based buffer overflow, attackers can potentially execute arbitrary code with elevated Local System privileges. This vulnerability affects all SAC releases up to and including version 10.9 R3 (build 10.9.7449), posing a significant risk to system integrity.

Affected Version(s)

Safenet Authentication Client Service Windows 0 <= 10.9.7449

References

https://supportportal.thalesgroup.com/csm?id=kb_article_v...
vendor-advisory

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

David Carliez (david.carliez.consulting@gmail.com)
.