Skip to content
OpenAdvisories

Package · PyPI

utcp-http

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-44661

    python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol

    python-utcp is the python implementation of UTCP. Prior to 1.1.3, the utcp-http plugin is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundary inconsistency between manual discovery and tool invocation. register_manual() validat…

    universal-tool-calling-protocol python-utcp utcp-http PyPI