Skip to content
OpenAdvisories

Package · PyPI

blender-mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-66004

    BlenderMCP Path Traversal via download_polyhaven_asset API

    BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or …

    ahujasid blender-mcp blender-mcp PyPI