Description
@utcp/http before 1.1.14 contains a server-side request forgery vulnerability that allows remote manuals to reach loopback services by bypassing the remote-loopback check with a {host} placeholder. Attackers can supply host arguments like 127.0.0.1 or register tools via Streamable HTTP and SSE discovery to access internal services on the agent machine.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| universal-tool-calling-protocol | @utcp/http | 0 <1.1.14 | — |
References
- https://github.com/universal-tool-calling-protocol/typescript-utcp/pull/58
- https://github.com/universal-tool-calling-protocol/typescript-utcp/pull/60
- https://github.com/universal-tool-calling-protocol/typescript-utcp/security/advisories/GHSA-r8j5-8747-88cm
- https://www.npmjs.com/package/@utcp/http
- https://www.vulncheck.com/advisories/utcp-http-before-1.1.14-ssrf-to-loopback-via-host-placeholder-in-call-templates