p PatchFirst

CVE-2026-66004

CVE-2026-66004 · BlenderMCP Path Traversal via download_polyhaven_asset API

This page contains facts from public vulnerability sources. Check the original advisory before updating.

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.

CVSS 6.0 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • blender-mcp

    Versions
    • ≥ 0, < 30a3308446cd8f81a9446e5a2ed657c0d8d86072: Affected (git)

    No fix published

  • blender-mcp PyPI

    Versions
    • 0.1.0
    • 0.1.1
    • 1.0.0
    • 1.0.2
    • 1.1.0
    • 1.1.1
    • 1.1.2
    • 1.1.3
    • 1.2
    • 1.2.1
    • 1.3.1
    • 1.4.0
    • 1.5.0
    • 1.5.1
    • 1.5.2
    • 1.5.3
    • 1.5.4
    • 1.5.5
    • 1.5.6
    • 1.6.0
    • 1.6.1
    • 1.6.2
    • 1.6.3
    • 1.6.4
    Affected ranges
    • ECOSYSTEM: < 1.6.5

    Update to 1.6.5

Original sources

Check your server →