A vulnerability identified as critical has been detected in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b . The impacted element is the function execute_blender_code of the file /src/blender_mcp/server.py . This manipulation of the argument code causes code injection. This vulnerability is tracked as CVE-2026-10688 . The attack is possible to be carried out remotely. Moreover, an exploit is present. This product adopts a rolling release strategy to maintain continuous deliv