CVE-2026-101058 universal-tool-calling-protocol CVE debrief

Who should care

Defenders responsible for systems using python-utcp (utcp-http) should assess exposure to potential server-side request forgery attacks. They should verify if their systems use python-utcp (utcp-http) versions before 1.1.12 and prioritize updating to version 1.1.12 or later.

Why it matters

CVE-2026-101058 is a server-side request forgery vulnerability in python-utcp (pip package utcp-http) before version 1.1.12. Defenders should assess exposure, monitor for suspicious traffic, and prioritize updating to version 1.1.12 or later.

• Defenders need to verify if their systems use python-utcp (utcp-http) versions before 1.1.12 and assess exposure to potential server-side request forgery attacks.
• Defenders should monitor for and block suspicious traffic to loopback services to prevent potential exploitation.
• Defenders need to prioritize updating python-utcp (utcp-http) to version 1.1.12 or later to fix the vulnerability.

Technical summary

The python-utcp (pip package utcp-http) package before version 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP manual point at the agent's own loopback interface when that manual is discovered from a remote, non-loopback origin. This allows an attacker to cause the client to issue requests to services bound only to 127.0.0.1 on the victim host and have the response bodies returned to the caller (server-side request forgery). The http, sse and streamable_http protocols are all affected. Reach is limited to loopback, and exploitation further requires a loopback service that answers unauthenticated requests with useful data.

Defensive priority

Defenders should prioritize verifying if their systems use python-utcp (utcp-http) versions before 1.1.12 and assess exposure to potential server-side request forgery attacks. They should also monitor for and block suspicious traffic to loopback services.

Recommended defensive actions

• Verify if python-utcp (utcp-http) versions before 1.1.12 are in use and assess exposure to potential server-side request forgery attacks.
• Monitor for and block suspicious traffic to loopback services.
• Update python-utcp (utcp-http) to version 1.1.12 or later.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record and NVD entry provide details about the vulnerability, including its description, CVSS score, and affected versions. However, there is limited information about potential exploitation or victim impact.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.