Arena Sdk
Monthly
DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows enables a local low-privileged attacker to execute arbitrary code at the privilege level of the SDK process by planting a malicious DLL in a user-controlled directory present in the PATH environment variable. The SDK's dependency resolution fallback traverses PATH when a required DLL is not found locally, making the attack reliable and requiring no special tooling. No public exploit has been identified at time of analysis, but the technique is well-documented and the CVSS scope change (S:C) signals that impact can extend beyond the attacker's own privilege tier if the SDK runs under a higher-privileged account.
DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows enables a local low-privileged attacker to execute arbitrary code at the privilege level of the SDK process by planting a malicious DLL in a user-controlled directory present in the PATH environment variable. The SDK's dependency resolution fallback traverses PATH when a required DLL is not found locally, making the attack reliable and requiring no special tooling. No public exploit has been identified at time of analysis, but the technique is well-documented and the CVSS scope change (S:C) signals that impact can extend beyond the attacker's own privilege tier if the SDK runs under a higher-privileged account.