EUVD-2026-48604
GHSA-4h8q-hh2j-755w
Severity by source
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulnCheck) · only source for this CVE.
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.
AnalysisAI
Persistent code execution via path traversal in BlenderMCP through version 0 (before commit 30a3308) allows attackers performing MITM or prompt injection to overwrite arbitrary files, such as .bashrc, by injecting traversal sequences into API response include keys. Public exploit code exists, but no active exploitation has been confirmed by CISA KEV.
More in Blender Mcp
View allServer-side request forgery in blender-mcp's ZIP File Handler allows authenticated remote attackers to manipulate the zi
Server-Side Request Forgery and arbitrary file read in ahujasid/blender-mcp allows authenticated remote attackers to exf
Same weakness CWE-22 – Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today