CVE-2026-101060
Last modified
CVE-2026-101060 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal services, allowing the UTCP client to reach cloud metadata endpoints or internal HTTP services and return their response bodies to the caller..
Description
python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the target. Attackers controlling a tool endpoint can return a 302 redirect to internal services, allowing the UTCP client to reach cloud metadata endpoints or internal HTTP services and return their response bodies to the caller.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| universal-tool-calling-protocol | python-utcp | < 1.1.4 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-101060?
How severe is CVE-2026-101060?
How do I fix CVE-2026-101060?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-101055A security flaw has been discovered in Thinkware U3000 up to…5.3
- CVE-2026-101056Cloudreve before 4.16.1 fails to revalidate share access whe…5.3
- CVE-2026-101057utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 conne…3.1
- CVE-2026-101058python-utcp (pip package utcp-http) before 1.1.12 does not v…6.9
- CVE-2026-101059utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl…7.1
- CVE-2026-10106Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.1…6.5
- CVE-2026-101061utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contai…4.7
- CVE-2026-101062Obot before v0.23.0 (affected versions <= v0.22.1) running w…8.8
- CVE-2026-101063Obot versions before v0.23.0 fail to enforce authentication …5.3
- CVE-2026-101064Obot before v0.23.0 contains a server-side request forgery v…7.6
- CVE-2026-101065Obot is an open-source AI agent/MCP platform. In all version…9.8
- CVE-2026-101066A vulnerability was determined in dbgate up to 7.3.1. The im…7.3
Are you affected by CVE-2026-101060?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST