CVE-2026-101060
Received Received - Intake

UTCP Client SSRF via Unvalidated HTTP Redirects Before 1.1.4

Publication date: 2026-09-27

Last updated on: 2026-09-27

Assigner: VulnCheck

Description
python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal services, allowing the UTCP client to reach cloud metadata endpoints or internal HTTP services and return their response bodies to the caller.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-27
Last Modified
2026-09-27
Generated
2026-09-27
AI Q&A
2026-09-27
EPSS Evaluated
N/A
NVD
CVE-2026-101060
EUVD
EUVD-2026-87985

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
universal_tool_calling_protocol python_utcp to 1.1.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in the python-utcp library affecting versions before 1.1.4. The HttpCommunicationProtocol.call_tool function validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers can exploit this by registering a tool with a URL that redirects to internal services, such as cloud metadata endpoints, allowing them to access restricted services and exfiltrate sensitive data like IAM credentials.

Detection Guidance

To detect this vulnerability, inspect network traffic for unexpected HTTP redirects from python-utcp tool endpoints. Check if the python-utcp library version is below 1.1.4 using commands like pip show python-utcp or pip list | grep utcp. Monitor for outbound requests to internal IP ranges or cloud metadata endpoints from your application.

Impact Analysis

This vulnerability can allow attackers to access internal HTTP services that should be blocked, potentially leading to data breaches or infrastructure takeover on cloud instances with IMDSv1 enabled. Attackers could exfiltrate sensitive data like IAM credentials or other internal service responses.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may result in violations of GDPR, HIPAA, or other regulations. Data breaches involving personal or health information could lead to legal penalties, reputational damage, and loss of compliance certifications.

Mitigation Strategies

Immediately upgrade python-utcp to version 1.1.4 or later. If upgrading is not possible, disable automatic HTTP redirects in the library configuration or implement server-side validation of all redirect targets. Restrict outbound network access to trusted endpoints and block requests to internal IP ranges or cloud metadata endpoints.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101060. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart