105 matches found
CVE-2026-101061
utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. The GraphQL plugin uses a vulnerable prefix check allowing bypass URLs like http://127.0.0.1.attacker.example, while the WebSocket plugi...
CVE-2026-101060
python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.calltool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal...
CVE-2026-101059
utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints. When a victim registers an attacker-controlled OpenAPI spec and invokes a generated OAuth2-protected tool, the librar...
CVE-2026-101058
python-utcp pip package utcp-http before 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP manual point at the agent's own loopback interface when that manual is discovered from a remote, non-loopback origin. Because ensuresecureurl intentionally permits loopback HTTP for...
CVE-2026-101057
utcp-mcp the MCP plugin of python-utcp through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call template's mcpServers configuration without the ensuresecureurl validation that the HTTP-family plugins apply, so the HTTPS/WSS-or-loopback rule is not enforced. A call template...
CVE-2026-101061 utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass
utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. The GraphQL plugin uses a vulnerable prefix check allowing bypass URLs like http://127.0.0.1.attacker.example, while the WebSocket plugi...
CVE-2026-101061
The utcp-gql and utcp-websocket libraries, in versions before 1.1.1 , are vulnerable to server-side request forgery (SSRF) . The vulnerability stems from an incomplete application of fixes for CVE-2026-44661. Specifically, the GraphQL plugin utilizes a flawed prefix check that allows bypasses usi...
EUVD-2026-87986
utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. The GraphQL plugin uses a vulnerable prefix check allowing bypass URLs like http://127.0.0.1.attacker.example, while the WebSocket plugi...
CVE-2026-101061 utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass
utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. The GraphQL plugin uses a vulnerable prefix check allowing bypass URLs like http://127.0.0.1.attacker.example, while the WebSocket plugi...
CVE-2026-101060 python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects
python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.calltool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal...
EUVD-2026-87985
python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.calltool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal...
EUVD-2026-87984
utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints. When a victim registers an attacker-controlled OpenAPI spec and invokes a generated OAuth2-protected tool, the librar...
CVE-2026-101060 python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects
python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.calltool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal...
CVE-2026-101059 utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass
utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints. When a victim registers an attacker-controlled OpenAPI spec and invokes a generated OAuth2-protected tool, the librar...
CVE-2026-101059 utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass
utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints. When a victim registers an attacker-controlled OpenAPI spec and invokes a generated OAuth2-protected tool, the librar...
CVE-2026-101059
The utcp-http library, in versions before 1.1.4 , is vulnerable to a Trust Boundary Bypass involving the OAuth2 tokenUrl field. The library fails to validate this field when it is sourced from remote OpenAPI specifications . An attacker can exploit this by providing a malicious OpenAPI specificat...
CVE-2026-101060
Versions of python-utcp before 1.1.4 are vulnerable to a Server-Side Request Forgery (SSRF) in the HttpCommunicationProtocol.call_tool function. The root cause is that the application validates the initial tool URL but fails to re-validate the target during HTTP redirects . An attacker controllin...
CVE-2026-101058 python-utcp before 1.1.12 SSRF via Remote HTTP Manual
python-utcp pip package utcp-http before 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP manual point at the agent's own loopback interface when that manual is discovered from a remote, non-loopback origin. Because ensuresecureurl intentionally permits loopback HTTP for...
CVE-2026-101058
The python-utcp (pip package utcp-http ) version before 1.1.12 is vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists because the software fails to verify if tool URLs declared in a hand-written UTCP manual point to the host's loopback interface (127.0.0.1) when the manual is fet...
CVE-2026-101058 python-utcp before 1.1.12 SSRF via Remote HTTP Manual
python-utcp pip package utcp-http before 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP manual point at the agent's own loopback interface when that manual is discovered from a remote, non-loopback origin. Because ensuresecureurl intentionally permits loopback HTTP for...