Description
python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal services, allowing the UTCP client to reach cloud metadata endpoints or internal HTTP services and return their response bodies to the caller.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| universal-tool-calling-protocol | python-utcp | < 1.1.4 | 1.1.4 |
References
- GitHub Security Advisory (GHSA-9qhg-99ww-9mqc) vendor-advisory
- VulnCheck Advisory: python-utcp before 1.1.4 SSRF via unvalidated HTTP redirects third-party-advisory