PT-2026-68888
CVE-2026-9169
·
Published
2026-08-07
·
Updated
2026-10-24
Description by
CVSS 3.1
8.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
LUCID Vision Labs Arena SDK version 1.0.80.49
Description
DLL Search Order Hijacking on Windows allows a local attacker to execute arbitrary code with the privileges of the application. This occurs when the SDK traverses directories listed in the
PATH environment variable to find a required dependency that is not found locally, enabling the execution of a malicious DLL placed in a user-controlled directory.Recommendations
Update LUCID Vision Labs Arena SDK to a version newer than 1.0.80.49.
Found an issue in the description? Have something to add? Feel free to write us 👾