CVE-2026-101060 is a server-side request forgery vulnerability in python-utcp versions before 1.1.4. The vulnerability exists in HttpCommunicationProtocol.call_tool, which validates the initial tool URL but follows HTTP redirects without re-validating the target. This allows attackers controlling a tool endpoint to return a 302 redirect to internal services, potentially allowing the UTCP client to reach c [truncated]
HIGHuniversal-tool-calling-protocolCVE published 2026-09-27
The CVE-2026-101059 vulnerability in the utcp-http library before version 1.1.4 allows attackers to redirect OAuth2 credential submissions to arbitrary endpoints. This occurs because the library fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications. When a victim registers an attacker-controlled OpenAPI specification and invokes a generated OAuth2-protected tool, the library sends [truncated]
HIGHuniversal-tool-calling-protocolCVE published 2026-09-27
The CVE-2026-101058 vulnerability in python-utcp (pip package utcp-http) before version 1.1.12 allows for server-side request forgery (SSRF) attacks. An attacker can serve a malicious UTCP manual that, when registered by a victim, causes the client to issue requests to services bound only to the loopback interface (127.0.0.1) on the victim's host, potentially exposing sensitive data. The vulnerability is [truncated]
LOWuniversal-tool-calling-protocolCVE published 2026-09-27
The CVE-2026-101057 vulnerability in the utcp-mcp plugin of python-utcp allows for SSRF via unvalidated MCP server URLs. This issue arises because the plugin connects to HTTP and WebSocket MCP server URLs without ensuring they are secure, as required by the HTTPS/WSS-or-loopback rule. The vulnerability is limited by the fact that the mcpServers configuration is operator-authored and the connection is an M [truncated]
LOWuniversal-tool-calling-protocolCVE published 2026-06-15
A Server-Side Request Forgery (SSRF) vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function of the component utcp-gql/utcp-websocket. Performing a manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit is now public and may be used.
