---
id: CVE-2026-112109
title: Local privilege escalation in SafeNet Authentication Client SACSrv
summary: "A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an authenticated,\_non-administrator local user to trigger a heap-based buffer overflow through the service interface.\_Successful ex…"
severity: high
cvss: 7.3
cvssVector: 'CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-122
  - CWE-190
vendor: Thalesgroup
product: Safenet Authentication Client Service
affected:
  - safenet_authentication_client_service <= 10.9.7449
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-11-05T20:12:41.015658Z'
published: '2026-11-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:12:51.185Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-112109'
references:
  - url: >-
      https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=89d3c2ce2b105350cdc1f87df291bf55&sysparm_article=KB0031248
tags:
  - cve.org
ingestedAt: '2026-11-05T22:38:31.729Z'
---

## Overview

A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow arbitrary code execution with Local System privileges.This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).

## Affected

- `safenet_authentication_client_service <= 10.9.7449`

## Remediation

Upgrade to SafeNet Authentication Client 10.9 R3 Post GA (build 10.9.7954) or later.