Vulnerability · Published Sep 27, 2026 · Assigned by VulnCheck

CVE-2026-101060python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects

High 8.2

In plain English

A high-severity server-side request forgery in python-utcp from universal-tool-calling-protocol. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)0.2%top 86.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal services, allowing the UTCP client to reach cloud metadata endpoints or internal HTTP services and return their response bodies to the caller.

Affected products (as reported)

Vendor	Product	Versions
universal-tool-calling-protocol	python-utcp	0 – before 1.1.4

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

References

GitHub Security Advisory (GHSA-9qhg-99ww-9mqc) vendor-advisory
VulnCheck Advisory: python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects third-party-advisory