CVE-2026-66004 Details
Description
BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.
A path traversal vulnerability has been identified in BlenderMCP versions prior to the latest commit 30a3308. The issue resides in the 'download_polyhaven_asset' method, where the application fetches a JSON response from the Poly Haven API and directly uses dictionary keys from the 'include' field as filesystem paths without proper validation. This flaw allows attackers to inject traversal sequences that can overwrite sensitive files, such as '.bashrc' or SSH authorized keys, leading to persistent code execution. The vulnerability can be exploited through prompt injection or by intercepting and manipulating API responses during a man-in-the-middle (MITM) attack.
Users can update to the latest version of BlenderMCP, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 24, 2026CISA-ADP
Assessed Jul 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/ahujasid/blender-mcp/commit/30a3308446cd8f81a9446e5a2ed657c0d8d86072 | [email protected] | Source CodeVendor |
| https://github.com/ahujasid/blender-mcp/issues/257 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/ahujasid/blender-mcp/pull/258 | [email protected] | Issue TrackingVendor |
| https://www.vulncheck.com/advisories/blendermcp-path-traversal-via-download-polyhaven-asset-api | [email protected] | AdvisoryBundle |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| BlenderMCP | < commit 30a3308 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 27, 2026 | CVE Modified | CISA-ADP |
| Jul 24, 2026 | New CVE Received | [email protected] |