The vulnerability lies in the requests.get function within the server.py file of the ZIP File Handler component of ahujasid blender‑mcp. Manipulating the zip_file_url argument allows an attacker to cause the server to make arbitrary HTTP requests to internal or external resources. This results in a server‑side request forgery (SSRF) condition, enabling potential data exfiltration, internal network discovery, or exploitation of other services without needing local access. The weakness is a classic information‐leak / request‑forgery defect (CWE‑918). The impact is limited to entities that can reach the vulnerable endpoint and provide a zip_file_url value; it does not give direct code execution but can be leveraged for wider attacks.

All versions of ahujasid blender‑mcp up to commit 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b are affected. Because the project uses rolling releases, a precise version number cannot be given. The official fix is contained in commit 5b37be25242e73dc4cf1328974d30458b9e5d67e, which is available in the upstream repository and referenced in pull request 205.

The CVSS score is 5.3, indicating moderate severity. EPSS is not provided, and the issue is not listed in the CISA KEV catalog, suggesting low immediate exploitation probability. However, the vulnerability is publicly disclosed and exploitable from remote hosts, meaning that unpatched instances could be targeted by attackers. The attack vector is inferred to be remote HTTP request: an attacker sends a crafted ZIP_File_URL via the vulnerable endpoint to force outbound connections.