What is the CVSS score of EUVD-2026-54420?

EUVD-2026-54420 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Arena Sdk are affected by EUVD-2026-54420?

Windows systems running LUCID Vision Labs Arena SDK 1.0.80.49 are exposed to local privilege escalation attacks that could compromise SDK operations and escalate to system-level control.

How to fix or mitigate EUVD-2026-54420?

Within 24 hours, inventory all systems running LUCID Vision Labs Arena SDK 1.0.80.49 and restrict the Windows PATH environment variable to exclude user-writable directories; deploy application whitelisting (e.g., AppLocker or Windows Defender Application Control) to restrict DLL execution to approved locations. Within 7 days, implement file creation and modification monitoring on common PATH directories and audit local user privileges on affected systems, revoking unnecessary elevated access where operationally possible. Within 30 days, contact LUCID Vision Labs for patched SDK availability and establish a formal upgrade plan; if no patch timeline is provided, escalate the vendor requirement and develop alternative compensating control standards.

Arena Sdk EUVD-2026-54420

| CVE-2026-9169 HIGH

Uncontrolled Search Path Element (CWE-427)

2026-08-07 NCSC.ch

GHSA-rchh-68vw-685q

RCE Microsoft Arena Sdk

8.8

CVSS 3.1 · Vendor: NCSC.ch

Severity by source

Vendor (NCSC.ch) PRIMARY

8.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from Vendor (NCSC.ch) · only source for this CVE.

CVSS VectorVendor: NCSC.ch

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 07, 2026 - 09:22 vuln.today

CVE Published

Aug 07, 2026 - 08:47 cve.org

HIGH 8.8

DescriptionCVE.org

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a required dependency is not found locally.

AnalysisAI

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows enables a local low-privileged attacker to execute arbitrary code at the privilege level of the SDK process by planting a malicious DLL in a user-controlled directory present in the PATH environment variable. The SDK's dependency resolution fallback traverses PATH when a required DLL is not found locally, making the attack reliable and requiring no special tooling. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, inventory all systems running LUCID Vision Labs Arena SDK 1.0.80.49 and restrict the Windows PATH environment variable to exclude user-writable directories; deploy application whitelisting (e.g., AppLocker or Windows Defender Application Control) to restrict DLL execution to approved locations. …

Threat intelligence, references, and detailed analysis are available after sign-in.