Vulnerabilities

TI-2026-65094 CVE-2026-101061 · GHSA-gx2c-cr72-v8vv

utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass

MEDIUM 45

utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00244 Published 2026-09-27 Fixed in 1.1.1 CWE-918

TI-2026-65093 CVE-2026-101060 · GHSA-967h-fcmq-3m25

python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects

HIGH 70

python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the target…

CVSS 4.0HIGH 8.4 Network No auth User interaction EPSS 0.00225 Published 2026-09-27 Fixed in 1.1.4 CWE-918

TI-2026-65092 CVE-2026-101059 · GHSA-r549-qqpm-phj8

utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass

MEDIUM 64

utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00225 Published 2026-09-27 Fixed in 1.1.4 CWE-918

TI-2026-65091 CVE-2026-101058 · GHSA-88pp-fjxx-6p68

python-utcp before 1.1.12 SSRF via Remote HTTP Manual

LOW 30

python-utcp (pip package utcp-http) before 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP manual point at the agent's own loopback interface when that manual is discovered from a remote, non-loo…

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00174 Published 2026-09-27 Fixed in 1.1.12 CWE-918

TI-2026-65090 CVE-2026-101057 · GHSA-vr54-j4qq-9vj9

utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL

LOW 11

utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration without the ensure_secure_url validation that the HTTP-family…

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00111 Published 2026-09-27 Fixed in 1.1.3 CWE-319

TI-2026-10502 CVE-2026-12210 · GHSA-ppx3-28rw-8fpf

universal-tool-calling-protocol python-utcp utcp-gql/utcp-websocket server-side request forgery

MEDIUM 57

A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00228 Published 2026-06-15 Fixed in 1.1.1 CWE-918

TI-2026-33157 CVE-2026-45366 · GHSA-r8j5-8747-88cm

typescript-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol

LOW 20

typescript-utcp is a typescript implementation of UTCP.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00122 Published 2026-05-28 Fixed in 1.1.2 CWE-918

TI-2026-33160 CVE-2026-45369 · GHSA-33p6-5jxp-p3x4

python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol

HIGH 71

python-utcp is the python implementation of UTCP.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00322 Published 2026-05-14 Fixed in 1.1.2 CWE-78

TI-2026-33161 CVE-2026-45370 · GHSA-5v57-8rxj-3p2r

python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection

LOW 33

python-utcp is the python implementation of UTCP.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00223 Published 2026-05-14 Fixed in 1.1.2 CWE-526

TI-2026-32561 CVE-2026-44661 · GHSA-39j6-4867-gg4w

python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol

LOW 21

python-utcp is the python implementation of UTCP.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00175 Published 2026-05-14 Fixed in 1.1.2 CWE-918

Vulnerabilities

Filters