Component affected: Support Tool (lch-support-linux-64bit / lch-support-win-64bit.exe), bundled with the Luna Client Package
Status: Fix in progress — no patched version available yet

Summary

A vulnerability ( CVE-2026-111943) has been identified in the Support Tool binaries (lch-support-linux-64bit on Linux, lch-support-win-64bit.exe on Windows) distributed as part of the Luna Client package downloaded from the Luna Cloud HSM Service. The issue is isolated to the Support Tool component; the Luna Client itself is not affected and can continue to be used normally.

Recommended Action
Users should refrain from running lch-support-linux-64bit or lch-support-win-64bit.exe until a patched version is released. No other mitigation is required at this time, as the vulnerability does not impact core Luna Client functionality.

Affected Versions

All versions of the Luna Client package bundling the Support Tool

Resolution

A patched release addressing CVE-2026-111943 is being prepared. This changelog will be updated with the fixed version once it is available.