blender-film

This code provides an unauthenticated arbitrary-Python execution bridge inside Blender at 127[.]0[.]0[.]1:9876. Its loopback binding limits exposure to local clients, but any process that can connect can execute code with Blender's privileges; the unbounded synchronous receive loop also permits local denial of service. This is a severe security risk if enabled where untrusted local processes can connect, though the explicit bridge behavior alone does not establish malicious intent.