CVE-2026-66004
Received Received - Intake

Path Traversal in BlenderMCP via Malicious API Response

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: VulnCheck

Description
BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-66004
EUVD
EUVD-2026-48604

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ahujasid blender_mcp to 30a3308 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a path traversal issue in BlenderMCP before commit 30a3308. It exists in the download_polyhaven_asset method where API response include keys are used directly as filesystem paths without validation. Attackers can inject traversal sequences like '../../.bashrc' to write arbitrary files outside the intended temporary directory, potentially overwriting sensitive system files and achieving persistent code execution.

Detection Guidance

To detect this vulnerability, check if BlenderMCP is installed and if the version is prior to commit 30a3308. Run: pip show blender-mcp to check the version. If installed, verify the presence of the download_polyhaven_asset function in addon.py and inspect for path traversal vulnerabilities in the include_path handling.

Impact Analysis

This vulnerability allows attackers to overwrite sensitive files like ~/.bashrc, authorized_keys, or other system files if they can manipulate API responses or perform MITM attacks. This could lead to persistent code execution, unauthorized access, or system compromise depending on the files overwritten.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by enabling unauthorized file writes. Attackers could overwrite sensitive files like configuration files, SSH keys, or user data, potentially exposing personal or protected health information. GDPR requires protecting personal data integrity, while HIPAA mandates safeguarding protected health information. Unauthorized file modifications could violate these requirements.

Mitigation Strategies

Immediately update BlenderMCP to commit 30a3308 or later. If updating is not possible, disable the download_polyhaven_asset function or restrict write permissions for the Blender process. Monitor for suspicious file writes in system directories.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66004. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart