lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked.