CVE-2026-10661
Blender MCP Server Open Function Input Image URL Injection
Publication date: 2026-06-02
Last updated on: 2026-06-02
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ahujasid | blender-mcp | to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-707 | The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component. |
| CWE-74 | The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the ahujasid blender-mcp software, specifically in the Open function of the src/blender_mcp/server.py file. It is caused by improper handling of the input_image_url argument, which leads to an injection vulnerability. This means that an attacker can manipulate this input to inject malicious data or commands.
The vulnerability can be exploited remotely, allowing attackers to perform the injection without needing local access. The issue has been publicly disclosed and a patch has been identified to fix it.
How can this vulnerability impact me? :
The vulnerability allows remote attackers to inject malicious input via the input_image_url parameter. This could potentially lead to unauthorized actions or compromise of the affected system depending on how the injection is leveraged.
However, the CVSS scores indicate a relatively low to moderate severity, with limited impact on confidentiality and no impact on integrity or availability. This suggests that while the vulnerability is exploitable remotely, the overall damage may be limited.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, it is recommended to deploy the patch identified by commit 5b37be25242e73dc4cf1328974d30458b9e5d67e.
Since the product follows a rolling release approach, ensure your installation is updated to the latest version that includes this patch.