BlenderMCP path traversal vulnerability can write arbitrary files
Start here
In versions of BlenderMCP before commit 30a3308, the download_polyhaven_asset method has a path traversal vulnerability. An attacker can write arbitrary files by injecting traversal sequences into the include key of the API response; a man-in-the-middle attack or prompt injection can provide malicious paths like '../../.bashrc', overwriting sensitive files and achieving persistent code execution.
Generated by AI from reports · Updated 5 days ago
Progress timeline
- GitHub 安全公告SelectedBlenderMCP's download_polyhaven_asset has a path traversal vulnerability that can write arbitrary files.
In BlenderMCP versions prior to commit 30a3308, the download_polyhaven_asset method has a path traversal vulnerability, allowing attackers to write arbitrary files by injecting traversal sequences into the include key of API responses. Man-in-the-middle attacks or prompt injection can provide malicious paths like '../../.bashrc', overwriting sensitive files and achieving persistent code execution.
Related discussion
Attention trend
New sources per day
- Oct 3: 1 new sources (1 outlets, 0 accounts)
- Oct 4: 0 new sources (0 outlets, 0 accounts)
- Oct 5: 0 new sources (0 outlets, 0 accounts)
- Oct 6: 0 new sources (0 outlets, 0 accounts)
- Oct 7: 0 new sources (0 outlets, 0 accounts)
- Oct 8: 0 new sources (0 outlets, 0 accounts)
- Oct 9: 0 new sources (0 outlets, 0 accounts)
- Oct 10: 0 new sources (0 outlets, 0 accounts)
- Oct 11: 0 new sources (0 outlets, 0 accounts)
- Oct 12: 0 new sources (0 outlets, 0 accounts)
- Oct 13: 0 new sources (0 outlets, 0 accounts)
- Oct 14: 0 new sources (0 outlets, 0 accounts)