CVE-2026-10662
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
A vulnerability was found in ahujasid blender-mcp up to 7636d13b. The function requests.get in src/blender_mcp/server.py of the ZIP File Handler component is vulnerable to server-side request forgery via the zip_file_url argument. The exploit has been made public.
Risk Assessment
An attacker can use the server to send requests to internal network resources, potentially leading to privilege escalation or data leakage.
Recommendation
Apply the patch identified as 5b37be25242e73dc4cf1328974d30458b9e5d67e or update to the latest version.
Other vulnerabilities in blender-mcp
See all- CVE-2026-10688Medium
The blender-mcp plugin up to version 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b contains a code injection vulnerability in the execute_blender_code function in /src/blender_mcp/server.py. The attack can be carried out remotely and the exploit has been publicly disclosed.
- CVE-2026-10661Medium
A vulnerability was found in the blender-mcp project in the Open function of server.py. Manipulating the input_image_url argument can lead to remote injection. The exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The affected element is the function requests.get of the file src/blender_mcp/server.py of the component ZIP File Handler. The manipulation of the argument zip_file_url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The patch is identified as 5b37be25242e73dc4cf1328974d30458b9e5d67e. It is advisable to implement a patch to correct this issue.