Universal-tool-calling-protocol vulnerabilities
We track 4 vulnerabilities in Universal-tool-calling-protocol products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 27, 2026.
Latest Universal-tool-calling-protocol vulnerabilities
- 8.2 High severity
python-utcp: Server-Side Request Forgery
python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint
- 7.1 High severity
python-utcp: Server-Side Request Forgery
utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints. When a victim registers an attacker-controlled OpenAPI spec and invokes a genera
- 7.7 High severity
python-utcp: Cleartext Storage of Sensitive Information in an Environment Variable
python-utcp is the python implementation of UTCP. Prior to 1.1.3, _prepare_environment() in cli_communication_protocol.py passes a full copy of os.environ to every CLI subprocess. When combined with CVE-2026-45369, an attacker can exfiltrate all process-level
- 8.3 High severity
python-utcp: Improper Neutralization of Special Elements used in an OS Command
python-utcp is the python implementation of UTCP. Prior to 1.1.3, the _substitute_utcp_args method in cli_communication_protocol.py inserts user-controlled tool_args values directly into shell command strings without any sanitization or escaping. These command