What is GHSA-rchh-68vw-685q?

GHSA-rchh-68vw-685q is a security advisory published by GitHub Security Advisories with High severity. DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local...

Which CVE IDs does GHSA-rchh-68vw-685q cover?

GHSA-rchh-68vw-685q covers the following CVE IDs: CVE-2026-9169. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rchh-68vw-685q?

GHSA-rchh-68vw-685q has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-rchh-68vw-685qHighCVSS 8.8

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local...

Vendor

GitHub Security Advisories

Published

August 7, 2026

Last Modified

August 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-9169 →

📋 Description

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a required dependency is not found locally.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-9169
https://arenasdk.s3.us-west-2.amazonaws.com/ArenaSDK_ReleaseNotes_v1.0.85.11.txt
https://thinklucid.com/downloads-hub
https://github.com/advisories/GHSA-rchh-68vw-685q