The vulnerability in Thales SafeNet Agent for Windows Logon permits an attacker to forge digital signatures due to improper certificate validation. This flaw is classified as CWE‑295 and can enable an attacker to authenticate as a legitimate user or execute privileged actions that are normally protected by certificate‑based authentication.

Affected by this flaw are Thales SafeNet Agent for Windows Logon versions 4.0.0, 4.1.1, and 4.1.2. Users running any of these releases on Windows are exposed to potential signature spoofing.

The CVSS score of 2.5 indicates low severity, and the EPSS score of less than 1% suggests a very low probability of exploitation. The vulnerability is not currently listed in the CISA KEV catalog. The likely attack vector is a local or remote attacker with the capability to supply forged certificates to the agent. No specific intrusion prerequisites are described, but the flaw allows bypassing authentication mechanisms that rely on validated certificates.