---
id: CVE-2026-101060
title: >-
  python-utcp versions before 1.1.4 contain a server-side request forgery
  vulnerability in HttpCommunicationProtocol.call_tool that validates the
  initial tool URL but follows HTTP redirects without re-validating the target
summary: >-
  python-utcp versions before 1.1.4 contain a server-side request forgery
  vulnerability in HttpCommunicationProtocol.call_tool that validates the
  initial tool URL but follows HTTP redirects without re-validating the target.
  Attackers contr…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N'
cwe:
  - CWE-918
vendor: universal-tool-calling-protocol
product: python-utcp
affected:
  - python-utcp < 1.1.4
published: '2026-09-27'
updated: '2026-09-27'
sourceUpdated: '2026-09-27T18:16:32.273'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-101060'
references:
  - url: >-
      https://github.com/universal-tool-calling-protocol/python-utcp/security/advisories/GHSA-9qhg-99ww-9mqc
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/python-utcp-before-1.1.4-ssrf-via-unvalidated-http-redirects
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-27T17:56:02.209Z'
---

## Overview

python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal services, allowing the UTCP client to reach cloud metadata endpoints or internal HTTP services and return their response bodies to the caller.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.