In LiquidationHandler::updateLiquidationContract(), the loan liquidator contract can be updated. 
src/lib/LiquidationHandler.sol#L74
There are two vulnerable conditions: updateLiquidationContract() is called when there are ongoing/unsettled auctions in the current liquidator or there might be a pending liquidateLoan() tx.
