BlenderMCP's download_polyhaven_asset has a path traversal vulnerability that can write arbitrary files.
BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes
AI summary
In BlenderMCP versions prior to commit 30a3308, the download_polyhaven_asset method has a path traversal vulnerability, allowing attackers to write arbitrary files by injecting traversal sequences into the include key of API responses. Man-in-the-middle attacks or prompt injection can provide malicious paths like '../../.bashrc', overwriting sensitive files and achieving persistent code execution.
Why it was selected
BlenderMCP 的路径穿越漏洞说明 MCP 工具调用中外部响应可被用于任意文件写入，为集成第三方 MCP 服务的开发者提供排查参照。