---
id: CVE-2026-112110
title: Privileged file deletion in SafeNet Authentication Client SACSrv
summary: "A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can\_allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the in…"
severity: medium
cvss: 5.8
cvssVector: 'CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-59
  - CWE-367
vendor: Thalesgroup
product: Safenet Authentication Client Service
affected:
  - safenet_authentication_client_service <= 10.9.7449
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:10:34.597050Z'
published: '2026-11-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:10:51.548Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-112110'
references:
  - url: >-
      https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=ab05ca862b505350cdc1f87df291bfce&sysparm_article=KB0031249
tags:
  - cve.org
ingestedAt: '2026-11-05T22:38:31.729Z'
---

## Overview

A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log
directory. 



This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).

## Affected

- `safenet_authentication_client_service <= 10.9.7449`

## Remediation

Upgrade to SafeNet Authentication Client 10.9 R3 Post GA (build 10.9.7954) or later.