blender-mcp

CRITICAL: The `execute_blender_code` tool explicitly allows execution of arbitrary Python code (using `exec()`) on the system where Blender is running. This presents a severe remote code execution vulnerability if an attacker can control the AI's prompts. Additionally, the `generate_hyper3d_model_via_images` tool, when configured to use local file paths, can read arbitrary files from the local filesystem, leading to potential information disclosure. API keys for Sketchfab and Hyper3D are stored unencrypted in Blender's scene properties, which could be exposed if the `.blend` file is shared or if the Blender instance is compromised. While `download_sketchfab_model` includes measures against zip-slip vulnerabilities, the complexity of such attacks means residual risk may exist.