CVE-2026-101061

utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incomplete application of CVE-2026-44661 fixes. The GraphQL plugin uses a vulnerable prefix check allowing bypass URLs like http://127.0.0.1.attacker.example, while the WebSocket plugin performs no URL validation despite documented security requirements. Attackers can force connections to internal services and cloud metadata endpoints by supplying malicious tool URLs in call templates, and receive configured API keys and OAuth tokens sent to attacker-controlled hosts.

• CWE-918

• https://github.com/universal-tool-calling-protocol/python-utcp/security/advisories/GHSA-ppx3-28rw-8fpf
• https://www.vulncheck.com/advisories/utcp-gql-and-utcp-websocket-before-1.1.1-ssrf-via-url-validation-bypass

Published

Sep 27, 2026

Last Modified

Sep 27, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-101056Cloudreve before 4.16.1 fails to revalidate share access whe…5.3
• CVE-2026-101057utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 conne…3.1
• CVE-2026-101058python-utcp (pip package utcp-http) before 1.1.12 does not v…6.9
• CVE-2026-101059utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl…7.1
• CVE-2026-10106Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.1…6.5
• CVE-2026-101060python-utcp versions before 1.1.4 contain a server-side requ…8.2
• CVE-2026-101062Obot before v0.23.0 (affected versions <= v0.22.1) running w…8.8
• CVE-2026-101063Obot versions before v0.23.0 fail to enforce authentication …5.3
• CVE-2026-101064Obot before v0.23.0 contains a server-side request forgery v…7.6
• CVE-2026-101065Obot is an open-source AI agent/MCP platform. In all version…9.8
• CVE-2026-101066A vulnerability was determined in dbgate up to 7.3.1. The im…7.3
• CVE-2026-101067A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7…7.3