CVE-2026-9169

HIGH 8.8

LUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windows

CVSS Score

8.8

EPSS Score

0.1%

EPSS Percentile

4th

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a required dependency is not found locally.

CWE	CWE-427
Vendor	lucid vision labs
Product	arena sdk
Published	Aug 7, 2026
Last Updated	Aug 7, 2026

Stay Ahead of the Next One

Get instant alerts for lucid vision labs arena sdk

Be the first to know when new high vulnerabilities affecting lucid vision labs arena sdk are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

LUCID Vision Labs / Arena SDK

1.0.80.49

References

NVD ↗ CVE.org ↗ EPSS Data ↗

arenasdk.s3.us-west-2.amazonaws.com: https://arenasdk.s3.us-west-2.amazonaws.com/ArenaSDK_ReleaseNotes_v1.0.85.11.txt thinklucid.com: https://thinklucid.com/downloads-hub/

Credits

Marco Nemeth at Oneconsult AG