PT-2026-68888 · Lucid Vision · Arena Sdk
CVE-2026-9169
·
Published
2026-08-07
·
Updated
2026-08-07
CVSS v3.1
8.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
LUCID Vision Labs Arena SDK version 1.0.80.49
Description
DLL Search Order Hijacking on Windows allows a local attacker to execute arbitrary code with the privileges of the application. This occurs when the SDK traverses directories listed in the
PATH environment variable to find a required dependency that is not found locally, enabling the execution of a malicious DLL placed in a user-controlled directory.Recommendations
Update LUCID Vision Labs Arena SDK to a version newer than 1.0.80.49.
Fix
Uncontrolled Search Path Element
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Arena Sdk