# CVE-2026-10662: ahujasid blender-mcp SSRF in Hunyuan3D integration

Source: https://junglewise.ai/threats/cve-2026-10662-ahujasid-blender-mcp-ssrf-in-hunyuan3d-integration  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-02. Updated: 2026-06-02  
License: CC BY 4.0 with a link back

CVE-2026-10662 · Severity: medium · CVSS 6.3 · Published 2026-06-02

blender-mcp is a tool that allows AI assistants to interact with the Blender 3D modeling application. A security flaw in its asset import feature allows a remote attacker to force the server to make unauthorized web requests. This could be used to scan internal networks, access sensitive cloud metadata, or interact with private services that are otherwise protected from the public internet.

Technologies: [Ahujasid Blender-Mcp](https://junglewise.ai/threats/technologies/blender-mcp). Vendors: [Ahujasid](https://junglewise.ai/threats/vendors/ahujasid).

## Quick answers

**Is CVE-2026-10662 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-10662 being exploited in the wild.

**How severe is CVE-2026-10662?** Medium severity, with a CVSS score of 6.3, published 2 June 2026.

**Which products and versions are affected?** Ahujasid Blender-Mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b.

**Is there a fix for CVE-2026-10662?** A patch was published on 2026-03-11: Pull request with fix submitted Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-10662 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-10662?** Check whether you run Ahujasid Blender-Mcp at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the `import_generated_asset_hunyuan` tool within `src/blender_mcp/server.py` and `addon.py`. The application fails to properly validate the `zip_file_url` parameter, performing only a superficial regex check for the `http://` or `https://` scheme. An attacker can provide a URL pointing to internal loopback addresses (127.0.0.1), cloud metadata services (169.254.169.254), or other private network resources. The Blender process then executes a `requests.get()` call to the attacker-specified destination. A patch has been identified in commit 5b37be25242e73dc4cf1328974d30458b9e5d67e which implements hostname resolution and IP blacklisting.

## Affected products

- ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b

## Timeline

- 2026-03-11: patched: Pull request with fix submitted
- 2026-06-02: disclosed: CVE published

## References

- [https://github.com/ahujasid/blender-mcp/](https://github.com/ahujasid/blender-mcp/)
- [https://github.com/ahujasid/blender-mcp/issues/203](https://github.com/ahujasid/blender-mcp/issues/203)
- [https://github.com/ahujasid/blender-mcp/pull/205](https://github.com/ahujasid/blender-mcp/pull/205)
- [https://github.com/bergskenop/blender-mcp/commit/5b37be25242e73dc4cf1328974d30458b9e5d67e](https://github.com/bergskenop/blender-mcp/commit/5b37be25242e73dc4cf1328974d30458b9e5d67e)
- [https://vuldb.com/cve/CVE-2026-10662](https://vuldb.com/cve/CVE-2026-10662)
- [https://vuldb.com/submit/830488](https://vuldb.com/submit/830488)
- [https://vuldb.com/vuln/367957](https://vuldb.com/vuln/367957)

## Related threats

- [ahujasid blender-mcp code injection in execute_blender_code](https://junglewise.ai/threats/cve-2026-10688-ahujasid-blender-mcp-code-injection-in-execute-blender-code)
- [ahujasid blender-mcp arbitrary file read in Hunyuan3D integration](https://junglewise.ai/threats/cve-2026-10661-ahujasid-blender-mcp-arbitrary-file-read-in-hunyuan3d-integration)