Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: ahujasid Clear all filters
TI-2026-47002 CVE-2026-66004 · GHSA-4h8q-hh2j-755w

BlenderMCP Path Traversal via download_polyhaven_asset API

Priority MEDIUM 60

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the download_polyhaven_asset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys…

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00296 Published 2026-07-24 Fixed in 1.6.5 CWE-22
TI-2026-09163 CVE-2026-10661 · GHSA-qqw9-95ww-prfm

ahujasid blender-mcp server.py open injection

Priority MEDIUM 57

A vulnerability has been found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00248 Published 2026-06-02 No fix listed CWE-707