ahujasid blender-mcp server.py open injection

published 2026-06-02 5 mo ago modified 2026-07-22 3 mo ago also EUVD-2026-34036

cvss: 4.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 16%
public exploits: 0; none known

A vulnerability has been found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. Impacted is the function Open of the file src/blender_mcp/server.py. The manipulation of the argument input_image_url leads to injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The identifier of the patch is 5b37be25242e73dc4cf1328974d30458b9e5d67e. To fix this issue, it is recommended to deploy a patch.

Patch / fix

links 2

github.com/bergskenop/blender-mcp@5b37be2 commit
github.com/ahujasid/blender-mcp#205 pull request

CISA SSVC

Exploitation: Proof of concept is public
Automatable: no
Technical impact: partial
Assessed: 5 mo ago (2026-06-03)

Exploit prediction

0.25% chance of exploitation in the next 30 days, higher than 16% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

github.com https://github.com/ahujasid/blender-mcp/issues/202 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	4.0	5.3	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
CNA	3.1	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
CNA	3.0	4.3	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
CNA	2.0	4.0	AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C
CNA	4.0	2.1	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CNA	3.1	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CNA	2.0	4.0	AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected products

ahujasid blender-mcp

Classification

Weakness

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component
CWE-707 Improper Neutralization

References

github.com /ahujasid/blender-mcp/pull/205
issue-tracking, patch
github.com /bergskenop/blender-mcp/commit/5b37be25242e73dc4cf1328974d30458b9e5d67e
patch
github.com /ahujasid/blender-mcp/issues/202
exploit, issue-tracking
vuldb.com /vuln/367956
vdb-entry, technical-description
vuldb.com /vuln/367956/cti
signature, permissions-required
vuldb.com /cve/CVE-2026-10661
third-party-advisory
vuldb.com /submit/830486
third-party-advisory
github.com /ahujasid/blender-mcp/
broken-link, product

Sources

CVE List CVE-2026-10661
NVD CVE-2026-10661

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary