The vulnerability is a path traversal flaw in the download_polyhaven_asset method of BlenderMCP, allowing attackers to supply traversal sequences in API response include keys. By injecting paths such as '../../.bashrc', an attacker can overwrite arbitrary files and achieve persistent code execution. The CVSS score of 6.0 reflects the moderate severity, but the EPSS score of <1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog.

All releases of BlenderMCP before commit 30a3308446cd8f81a9446e5a2ed657c0d8d86072 are affected. The vendor identified is ahujasid:blender-mcp. No explicit version range is given, so all versions prior to the commit are considered vulnerable.

Risk is moderate due to the CVSS 6, yet the low EPSS suggests exploitation is unlikely at present. The attack requires the ability to inject malicious data into the API response, which can be done via MITM or prompt injection. Once the attacker writes a file such as .bashrc, they can execute arbitrary code with the application's privileges. The vulnerability is not known to be actively exploited in the wild.