CyberRota Analysis
AI-GeneratedBlenderMCP prior to commit 30a3308 is vulnerable to a path traversal flaw in the download_polyhaven_asset method, enabling attackers to inject traversal sequences into API response keys. This could allow for the overwriting of sensitive files, potentially leading to persistent code execution through man-in-the-middle or prompt injection attacks. Organizations utilizing BlenderMCP should prioritize patching this vulnerability to mitigate risks associated with unauthorized file manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious paths like '../../.bashrc' to overwrite sensitive files and achieve persistent code execution.