CVE-2026-101061

MEDIUM 4.7

utcp-gql and utcp-websocket before 1.1.1 SSRF via URL validation bypass

CVSS Score

4.7

EPSS Score

0.0%

EPSS Percentile

0th

utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. The GraphQL plugin uses a vulnerable prefix check allowing bypass URLs like http://127.0.0.1.attacker.example, while the WebSocket plugin performs no URL validation despite documented security requirements. Attackers can force connections to internal services and cloud metadata endpoints by supplying malicious tool URLs in call templates, and receive configured API keys and OAuth tokens sent to attacker-controlled hosts.

CWE	CWE-918
Vendor	universal-tool-calling-protocol
Product	python-utcp
Published	Sep 27, 2026

Stay Ahead of the Next One

Get instant alerts for universal-tool-calling-protocol python-utcp

Be the first to know when new medium vulnerabilities affecting universal-tool-calling-protocol python-utcp are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

universal-tool-calling-protocol / python-utcp

0 < 1.1.1

universal-tool-calling-protocol / python-utcp

0 < 1.1.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/universal-tool-calling-protocol/python-utcp/security/advisories/GHSA-ppx3-28rw-8fpf vulncheck.com: https://www.vulncheck.com/advisories/utcp-gql-and-utcp-websocket-before-1.1.1-ssrf-via-url-validation-bypass

Credits

🔍 hariantara