CVE-2026-66004

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.

CVSS v4.0

6.0 MEDIUMCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.30% chance of exploitation in the next 30 days, 22th percentile

Published

2026-07-24

Updated

2026-07-27

Proof-of-concept exploits (1)

• ahujasid/blender-mcp/issues/257

References

• CVE Record
• NVD entry

Related

• CVE-2026-10661
• CVE-2026-10662
• CVE-2026-10688
• CVE-2026-6600
• CVE-2026-66005
• CVE-2026-6599