A DLL search order hijacking vulnerability in the LUCID Vision Labs Arena SDK could allow an authenticated local attacker to achieve arbitrary code execution.

This is a DLL search order hijacking vulnerability (CWE-427). An attacker with low-level access can place a malicious DLL in a location where the application searches for dependencies, leading to code execution when the application loads.

The exploitation of this vulnerability results in full system compromise, as the attacker can gain the same privileges as the application process. Given the high CVSS score of 8.8, this presents a significant risk to data integrity, system availability, and the confidentiality of information processed by the software.

Immediate Action: Update the Arena SDK to version 1.0.85.11 or later as specified in the vendor release notes.

Proactive Monitoring: Monitor system logs for unexpected file creation events in application directories and review process execution logs for unusual parent-child relationships involving the SDK.

Compensating Controls: Restrict write permissions on application directories and system paths to prevent unauthorized users from placing malicious DLL files.

Public Exploit Available: No (exploit_available: false)

Organizations utilizing the LUCID Vision Labs Arena SDK must prioritize upgrading to the latest version immediately. Failure to patch allows for potential local privilege escalation and full system compromise, necessitating prompt action to secure the environment.