CVE-2026-66004: BlenderMCP Path Traversal via download_polyhaven_asset API

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-24 · updated 2026-10-24
Weakness: CWE-22

Description

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.

References

https://github.com/ahujasid/blender-mcp/commit/30a3308446cd8f81a9446e5a2ed657c0d8d86072
https://github.com/ahujasid/blender-mcp/issues/257
https://github.com/ahujasid/blender-mcp/pull/258
https://www.vulncheck.com/advisories/blendermcp-path-traversal-via-download-polyhaven-asset-api

Get alerted when CVE-2026-66004 or the next vulnerability affects your stack