Skip to content
Heist/ feed
Back to feed
MediumFix available

BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes

Type: advisorySources: OSV2 source records

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.

Products
blender-mcp
Affected versions
0.1.0, 0.1.1, 1.0.0, 1.0.2, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.2, 1.2.1, 1.3.1, 1.4.0, 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.4
Fixed versions
1.6.5
CVEs
CVE-2026-66004
Confirmed fixed CVEs
Not specified
Updated in this feed
30 Oct 2026, 18:15 UTC · Revision 1

Source evidence

BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes

core-osv · Original source

Published 24 Jul 2026, 15:33 UTC

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.

osv:GHSA-4h8q-hh2j-755w

blender-mcp

Fixed versions: 1.6.5

Complete source record
{
  "id": "782e8e09be0d8fc859e8396f4854b923f4c85341af301948ec57f76874873a5e",
  "url": "https://osv.dev/vulnerability/GHSA-4h8q-hh2j-755w",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes",
    "summary": "BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.",
    "evidence": "osv:GHSA-4h8q-hh2j-755w",
    "products": [
      {
        "name": {
          "value": "blender-mcp",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "1.6.5",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": [
          {
            "value": "0.1.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.1.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.0.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.0.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.1.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.1.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.1.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.1.3",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.2.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.3.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.4.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.3",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.4",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.5",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.6",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.3",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.4",
            "evidence": "/affected/0/versions"
          }
        ]
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "GHSA-4h8q-hh2j-755w",
      "aliases": [
        "CVE-2026-66004",
        "GHSA-4h8q-hh2j-755w",
        "PYSEC-2026-4203"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N"
        },
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "1.6.5"
                }
              ]
            }
          ],
          "package": {
            "name": "blender-mcp",
            "purl": "pkg:pypi/blender-mcp",
            "ecosystem": "PyPI"
          },
          "versions": [
            "0.1.0",
            "0.1.1",
            "1.0.0",
            "1.0.2",
            "1.1.0",
            "1.1.1",
            "1.1.2",
            "1.1.3",
            "1.2",
            "1.2.1",
            "1.3.1",
            "1.4.0",
            "1.5.0",
            "1.5.1",
            "1.5.2",
            "1.5.3",
            "1.5.4",
            "1.5.5",
            "1.5.6",
            "1.6.0",
            "1.6.1",
            "1.6.2",
            "1.6.3",
            "1.6.4"
          ],
          "database_specific": {
            "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-4h8q-hh2j-755w/GHSA-4h8q-hh2j-755w.json"
          }
        }
      ],
      "modified": "2026-10-15T14:55:44.453859293Z",
      "provider": "osv",
      "references": [
        "https://nvd.nist.gov/vuln/detail/CVE-2026-66004",
        "https://github.com/ahujasid/blender-mcp/issues/257",
        "https://github.com/ahujasid/blender-mcp/pull/258",
        "https://github.com/ahujasid/blender-mcp/commit/30a3308446cd8f81a9446e5a2ed657c0d8d86072",
        "https://github.com/ahujasid/mcp-for-blender",
        "https://www.vulncheck.com/advisories/blendermcp-path-traversal-via-download-polyhaven-asset-api"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-22"
        ],
        "severity": "MODERATE",
        "github_reviewed": true,
        "nvd_published_at": "2026-07-24T15:19:07Z",
        "github_reviewed_at": "2026-10-02T22:43:51Z"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-66004",
        "evidence": "/aliases"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/1/score"
  },
  "source_id": "core-osv",
  "document_id": 332677,
  "published_at": "2026-07-24T15:33:04+00:00"
}

BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes

core-osv · Original source

Published 15 Oct 2026, 10:22 UTC

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.

osv:PYSEC-2026-4203

blender-mcp

Fixed versions: 1.6.5

Complete source record
{
  "id": "da1673ab2949f01a8da0d1491442ab71f9b70b034a19e0cc98ceba351845e280",
  "url": "https://osv.dev/vulnerability/PYSEC-2026-4203",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes",
    "summary": "BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.",
    "evidence": "osv:PYSEC-2026-4203",
    "products": [
      {
        "name": {
          "value": "blender-mcp",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "1.6.5",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": [
          {
            "value": "0.1.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.1.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.0.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.0.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.1.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.1.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.1.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.1.3",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.2.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.3.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.4.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.3",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.4",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.5",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.5.6",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.3",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "1.6.4",
            "evidence": "/affected/0/versions"
          }
        ]
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "PYSEC-2026-4203",
      "aliases": [
        "CVE-2026-66004",
        "GHSA-4h8q-hh2j-755w",
        "PYSEC-2026-4203"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N"
        },
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "1.6.5"
                }
              ]
            }
          ],
          "package": {
            "name": "blender-mcp",
            "purl": "pkg:pypi/blender-mcp",
            "ecosystem": "PyPI"
          },
          "versions": [
            "0.1.0",
            "0.1.1",
            "1.0.0",
            "1.0.2",
            "1.1.0",
            "1.1.1",
            "1.1.2",
            "1.1.3",
            "1.2",
            "1.2.1",
            "1.3.1",
            "1.4.0",
            "1.5.0",
            "1.5.1",
            "1.5.2",
            "1.5.3",
            "1.5.4",
            "1.5.5",
            "1.5.6",
            "1.6.0",
            "1.6.1",
            "1.6.2",
            "1.6.3",
            "1.6.4"
          ],
          "database_specific": {
            "source": "https://github.com/pypa/advisory-database/blob/main/vulns/blender-mcp/PYSEC-2026-4203.yaml"
          }
        }
      ],
      "modified": "2026-10-15T14:45:04.337467966Z",
      "provider": "osv",
      "references": [
        "https://nvd.nist.gov/vuln/detail/CVE-2026-66004",
        "https://github.com/ahujasid/blender-mcp/issues/257",
        "https://github.com/ahujasid/blender-mcp/pull/258",
        "https://github.com/ahujasid/blender-mcp/commit/30a3308446cd8f81a9446e5a2ed657c0d8d86072",
        "https://github.com/ahujasid/mcp-for-blender",
        "https://www.vulncheck.com/advisories/blendermcp-path-traversal-via-download-polyhaven-asset-api",
        "https://pypi.org/project/blender-mcp",
        "https://github.com/advisories/GHSA-4h8q-hh2j-755w"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-66004",
        "evidence": "/aliases"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/1/score"
  },
  "source_id": "core-osv",
  "document_id": 332634,
  "published_at": "2026-10-15T10:22:43.751245+00:00"
}