CVE-2026-79899 describes an insecure temporary file vulnerability (CWE-377) in Fortra BoKS Manager's bccgethostcert utility. The utility creates temporary files with predictable names and insufficient permissions due to the lack of a restrictive umask. This flaw allows a local user on the BoKS Master with read access to the BOKS_tmp directory to obtain sensitive cryptographic material, including CA secrets or host private keys, either while the utility is running or from leftover files after certificate creation completes. The vulnerability is present in versions >=8.1.0.0 <=8.1.0.23 and >=9.0.0.0 <=9.0.0.6.

A local attacker with read access to the BOKS_tmp directory on the BoKS Master can access sensitive cryptographic material such as CA secrets and host private keys. This exposure could lead to compromise of certificate authority secrets and host authentication credentials, potentially undermining the security of the certificate infrastructure. The CVSS 3.1 score of 7.9 (high) reflects the significant confidentiality and integrity impact with low attack complexity but requiring local privileges.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local user access to the BOKS_tmp directory to trusted administrators only to prevent unauthorized reading of temporary files. Monitor for any updates from Fortra regarding patches or configuration changes to address this vulnerability.