Race Condition Vulnerability in SafeNet Authentication Client by Thales Group
CVE-2026-112110

5.8MEDIUM

Key Information:

Vendor

Thalesgroup

Status
Safenet Authentication Client Service
Vendor
CVE Published:
5 November 2026

What is CVE-2026-112110?

A race condition in the log-cleanup functionality of the SafeNet Authentication Client (SAC) allows an authenticated non-administrator local user to manipulate file deletion processes. This vulnerability enables the potential redirection of privileged file deletion actions, which may occur outside the designated log directory. As such, sensitive data could be improperly accessed or compromised. Users of the affected SAC releases need to be aware of this security risk and take necessary measures to mitigate any possible impacts.

Affected Version(s)

Safenet Authentication Client Service Windows 0 <= 10.9.7449

References

https://supportportal.thalesgroup.com/csm?id=kb_article_v...
vendor-advisory

CVSS V4

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

David Carliez (david.carliez.consulting@gmail.com)
.