The vulnerability involves the Open function in the server.py module of ahujasid Blender MCP. Manipulation of the input_image_url argument leads to injection, allowing an attacker to embed malicious code or otherwise alter the program’s normal behavior. This injection can be exploited remotely, giving the attacker the ability to execute unintended commands or code within the context of the server.

Affected systems are all installations of ahujasid Blender MCP running any release up to commit 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. Because the project follows a rolling‑release model, specific version numbers are not listed; the known patch is identified by commit 5b37be25242e73dc4cf1328974d30458b9e5d67e.

The CVSS score of 5.3 places this flaw in the moderate severity range. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting that widespread automated exploitation is not yet documented. The attack vector is remote, most likely via an exposed HTTP endpoint that invokes the Open function, and it requires the attacker to supply a crafted URL pointing to an image resource that can trigger the injection. Once the injection succeeds, the attacker may gain code execution capability on the host running Blender MCP.