The ahujasid blender-mcp product contains a path traversal vulnerability prior to commit 30a3308 in the download_polyhaven_asset method. Attackers can inject directory traversal sequences in API response include keys, allowing arbitrary file writes outside the intended directory. This can be exploited via MITM or prompt injection attacks to overwrite sensitive files, such as '../../.bashrc', leading to persistent code execution. The vulnerability is rated medium severity with a CVSS 4.0 score of 6.0. No vendor advisory or patch information is currently available.

Successful exploitation allows an attacker to write arbitrary files on the affected system by bypassing pathname restrictions. This can lead to overwriting sensitive files and achieving persistent code execution, which compromises system integrity and security. The attack requires network-level access to perform MITM or the ability to inject prompts, limiting the attack surface somewhat. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to prevent MITM attacks and avoid using untrusted inputs that could lead to prompt injection in the affected method. Monitor for vendor updates regarding an official fix.