Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.0

Blender-MCP lets attackers overwrite any file

CVE-2026-66004 · published 3 months ago
Summary

The Blender-MCP tool can be tricked into writing files anywhere on the system when a malicious download request includes special path characters like '../../'. This could let an attacker replace important files and run code later. Upgrade to the newest version of Blender-MCP or apply the vendor’s patch, and ensure that all network traffic to the tool is protected with proper encryption and validation.

What to do
  • Update blender-mcp to version 1.6.5.
  • Update ahujasid blender-mcp to version 30a3308446cd8f81a9446e5a2ed657c0d8d86072 or later.
Affected software
Ecosystem VendorProductAffected versions
– ahujasid blender-mcp < 30a3308446cd8f81a9446e5a2ed657c0d8d86072
pip – blender-mcp < 1.6.5
Fix: upgrade to 1.6.5
Original advisory text
BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes
BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.0 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published24 Jul 2026
Updated3 Nov 2026
First seen24 Jul 2026
Sources
CVE-2026-66004 · NVD
CVE-2026-66004 · MITRE
GHSA-4h8q-hh2j-755w · GHSA
GHSA-4h8q-hh2j-755w · OSV
CVE-2026-66004 · OSV
PYSEC-2026-4203 · OSV
Track software like this
Free during beta