All vulnerabilities
CVE-2026-66004GHSA-4h8q-hh2j-755wPYSEC-2026-4203

blender-mcp: BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes

ahujasid blender-mcppipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
6.0Medium
ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 27 Jul 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.30%Chance of exploitation activity in the next 30 days, higher than 21% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.6.5Also 30a3308446cd8f81a9446e5a2ed657c0d8d86072GitHub
Published24 Jul 2026Updated 15 Oct 2026CVE List

What fixes it

  • 1.6.5blender-mcp, pipGitHub
  • 30a3308446cd8f81a9446e5a2ed657c0d8d86072blender-mcpCVE List
  • 1.6.5blender-mcp, PyPIOSVpip install "blender-mcp>=1.6.5"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.

Text from CVE List

Affected versions 27

  • blender-mcp, pip< 1.6.5GitHub
  • blender-mcpaffected: all versions before 30a3308446cd8f81a9446e5a2ed657c0d8d86072CVE List
  • blender-mcp, PyPIfrom first release, fixed in 1.6.5OSV
  • blender-mcp, PyPI0.1.0OSV
  • blender-mcp, PyPI0.1.1OSV
  • blender-mcp, PyPI1.0.0OSV
  • blender-mcp, PyPI1.0.2OSV
  • blender-mcp, PyPI1.1.0OSV
  • blender-mcp, PyPI1.1.1OSV
  • blender-mcp, PyPI1.1.2OSV
  • blender-mcp, PyPI1.1.3OSV
  • blender-mcp, PyPI1.2OSV
  • blender-mcp, PyPI1.2.1OSV
  • blender-mcp, PyPI1.3.1OSV
  • blender-mcp, PyPI1.4.0OSV
  • blender-mcp, PyPI1.5.0OSV
  • blender-mcp, PyPI1.5.1OSV
  • blender-mcp, PyPI1.5.2OSV
  • blender-mcp, PyPI1.5.3OSV
  • blender-mcp, PyPI1.5.4OSV
  • blender-mcp, PyPI1.5.5OSV
  • blender-mcp, PyPI1.5.6OSV
  • blender-mcp, PyPI1.6.0OSV
  • blender-mcp, PyPI1.6.1OSV
  • blender-mcp, PyPI1.6.2OSV
  • blender-mcp, PyPI1.6.3OSV
  • blender-mcp, PyPI1.6.4OSV

References 6