ahujasid

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ahujasid records in CISA KEV

No ahujasid vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-47002 CVE-2026-66004 · GHSA-4h8q-hh2j-755w

BlenderMCP Path Traversal via download_polyhaven_asset API

MEDIUM 60

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys…

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00296 Published 2026-07-24 Fixed in 1.6.5 CWE-22

TI-2026-09164 CVE-2026-10662 · GHSA-5hr7-6m56-f3rg

ahujasid blender-mcp ZIP File server.py requests.get server-side request forgery

MEDIUM 57

A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00227 Published 2026-06-02 No fix listed CWE-918

TI-2026-09163 CVE-2026-10661 · GHSA-qqw9-95ww-prfm

ahujasid blender-mcp server.py open injection

MEDIUM 57

A vulnerability has been found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00248 Published 2026-06-02 No fix listed CWE-707

TI-2026-09188 CVE-2026-10688 · GHSA-fx9q-x9g5-jgg6

ahujasid blender-mcp server.py execute_blender_code code injection

MEDIUM 56

A vulnerability was determined in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00178 Published 2026-06-02 No fix listed CWE-74

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0