GitHub Advisoryadvisory · PyPI

GHSA-4h8q-hh2j-755w BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes

MEDIUM Published 2026-07-24 Modified 2026-10-02 Official page ↗
Aliases
CVE-2026-66004
Ecosystem
PyPI
Packages
blender-mcp
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-22
Reviewed
2026-10-02

Affected packages

• PyPI blender-mcp: < 1.6.5 → fixed in 1.6.5

Description

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.

Related

Alias · CVE (1)

  • CVE-2026-66004 BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References