The ahujasid blender-mcp project contains a path traversal vulnerability (CVE-2026-66004) in the download_polyhaven_asset method prior to commit 30a3308. This vulnerability allows attackers to write arbitrary files by injecting directory traversal sequences into API response include keys. Exploitation requires an attacker to manipulate API responses via MITM or prompt injection attacks to supply malicious file paths such as '../../.bashrc'. Successful exploitation can overwrite sensitive files and achieve persistent code execution. The vulnerability has a CVSS 4.0 score of 6.0 (medium severity). There is no vendor advisory or patch information available at this time.

An attacker who can perform MITM or prompt injection attacks can exploit this vulnerability to write arbitrary files on the affected system. This can lead to overwriting critical files like .bashrc, enabling persistent code execution. The vulnerability does not require privileges but does require user interaction (UI:P) and has high attack complexity (AC:H). No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid exposing the affected functionality to untrusted networks or users, and mitigate the risk of MITM or prompt injection attacks through secure communication channels and input validation.