Component affected: Support Tool (lch-support-linux-64bit / lch-support-win-64bit.exe), bundled with the Luna Client Package
Status: Patched — fixed version available

Summary

A vulnerability ( CVE-2026-111943) has been identified in the Support Tool binaries (lch-support-linux-64bit on Linux, lch-support-win-64bit.exe on Windows) distributed as part of the Luna Client package downloaded from the Luna Cloud HSM Service. The issue is isolated to the Support Tool component; the Luna Client itself is not affected and can continue to be used normally.

Recommended Action
Users should download the updated Luna Client bundle from the DPoD console and ensure they are using lch-support v1.1.4 or higher, which contains the fix. Client bundles downloaded prior to this update should be replaced.

Affected Versions

All versions of the Luna Client package bundling Support Tool versions prior to v1.1.4

Resolution

Fixed in lch-support v1.1.4. The updated Luna Client bundle is available for download from the DPoD console.