CVE-2010-5105: The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite...

Security readout for executives and security teams

Blender could mishandle a temporary quit.blend file during its quit/undo-save process. On affected local systems, a user could use a symlink condition to cause Blender to overwrite another file. This is mainly a local integrity risk, not a remote compromise based on the provided sources. Exposure is most likely on legacy workstations, shared Linux desktops, render nodes, or packaged Blender deployments running Blender 2.63a, 2.5, or earlier. Current supported Blender installations are not shown as affected in the provided bundle. Treat this as a legacy software hygiene issue with higher priority on shared machines. It does not indicate remote exploitation, but arbitrary local file overwrite can affect integrity and may support broader local compromise chains. Mitigation focus: Inventory Blender installations and remove unsupported vulnerable versions.; Upgrade Blender using vendor or distribution-supported packages.; Review Debian, Blender, and openSUSE guidance for fixed package details..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.