ahujasid

Products

ProductCVEsExploitedLatest
blender-mcp4–Jul 24, 2026

Exploited and recent CVEs

  • CVE-2026-66004 Medium 5.3 BlenderMCP Path Traversal via download_polyhaven_asset API 0.3%
  • CVE-2026-10688 Medium 5.5 ahujasid blender-mcp server.py execute_blender_code code injection 0.2%
  • CVE-2026-10662 Medium 6.3 ahujasid blender-mcp ZIP File server.py requests.get server-side request forgery 0.2%
  • CVE-2026-10661 Medium 4.3 ahujasid blender-mcp server.py open injection 0.2%