Junglewise Threat Intelligence

CVE-2026-10662: ahujasid blender-mcp SSRF in Hunyuan3D integration

CVE-2026-10662 · Severity: medium · CVSS 6.3 · Published 2026-06-02

Technologies: Ahujasid Blender-Mcp. Vendors: Ahujasid.

Executive brief

blender-mcp is a tool that allows AI assistants to interact with the Blender 3D modeling application. A security flaw in its asset import feature allows a remote attacker to force the server to make unauthorized web requests. This could be used to scan internal networks, access sensitive cloud metadata, or interact with private services that are otherwise protected from the public internet.

Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the `import_generated_asset_hunyuan` tool within `src/blender_mcp/server.py` and `addon.py`. The application fails to properly validate the `zip_file_url` parameter, performing only a superficial regex check for the `http://` or `https://` scheme. An attacker can provide a URL pointing to internal loopback addresses (127.0.0.1), cloud metadata services (169.254.169.254), or other private network resources. The Blender process then executes a `requests.get()` call to the attacker-specified destination. A patch has been identified in commit 5b37be25242e73dc4cf1328974d30458b9e5d67e which implements hostname resolution and IP blacklisting.

Affected products

  • ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b

Timeline

  • 2026-03-11: patched: Pull request with fix submitted
  • 2026-06-02: disclosed: CVE published

References

Related threats