Read the docs

universal-tool-calling-protocol

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

universal-tool-calling-protocol records in CISA KEV

No universal-tool-calling-protocol vulnerabilities are listed in CISA KEV.

Records

10 records

TI-2026-65093 CVE-2026-101060 · GHSA-967h-fcmq-3m25

python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects

Priority HIGH 70

python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the target…

CVSS 4.0HIGH 8.4 Network No auth User interaction EPSS 0.00225 Published 2026-09-27 Fixed in 1.1.4 CWE-918
TI-2026-65092 CVE-2026-101059 · GHSA-r549-qqpm-phj8

utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass

Priority MEDIUM 64

utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00225 Published 2026-09-27 Fixed in 1.1.4 CWE-918
TI-2026-65094 CVE-2026-101061 · GHSA-gx2c-cr72-v8vv

utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass

Priority MEDIUM 45

utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00244 Published 2026-09-27 Fixed in 1.1.1 CWE-918
TI-2026-65091 CVE-2026-101058 · GHSA-88pp-fjxx-6p68

python-utcp before 1.1.12 SSRF via Remote HTTP Manual

Priority LOW 30

python-utcp (pip package utcp-http) before 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP manual point at the agent's own loopback interface when that manual is discovered from a remote, non-loo…

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00174 Published 2026-09-27 Fixed in 1.1.12 CWE-918
TI-2026-65090 CVE-2026-101057 · GHSA-vr54-j4qq-9vj9

utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL

Priority LOW 11

utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration without the ensure_secure_url validation that the HTTP-family…

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00111 Published 2026-09-27 Fixed in 1.1.3 CWE-319
Open these records in search →