Bug 2567642 (CVE-2026-112110)

Summary: CVE-2026-112110 SafeNet Authentication Client: SafeNet Authentication Client: Arbitrary file deletion via race condition in SACSrv log cleanup
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in SafeNet Authentication Client (SAC). This vulnerability allows an authenticated local user to delete arbitrary files with elevated privileges by exploiting a time-of-check to time-of-use (TOCTOU) race condition in the SACSrv log-cleanup routine. By redirecting privileged file deletion operations outside the intended log directory, an attacker could compromise system integrity or cause a Denial of Service (DoS).
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-11-05 22:14:20 UTC 
A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log
directory. 



This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).