Universal-Tool-Calling-Protocol

5 CVEs across 2 Universal-Tool-Calling-Protocol products. Browse Universal-Tool-Calling-Protocol vulnerabilities, severities, and proof-of-concept exploits.

Universal-Tool-Calling-Protocol products with known CVEs

ProductCVEs
Python-Utcp4
Typescript-Utcp1
Universal-Tool-Calling-Protocol CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-12210Medium6.32026-06-15A vulnerability was detected in universal-tool-calling-protocol python-utcp 1.1.0. This affects an unknown function of the component utcp-gql/utcp-websocket. P…
CVE-2026-45366Medium4.72026-05-28typescript-utcp is a typescript implementation of UTCP. Prior to 1.1.2, the @utcp/http package is vulnerable to a blind Server-Side Request Forgery (SSRF) caus…
CVE-2026-45370High7.72026-05-14python-utcp is the python implementation of UTCP. Prior to 1.1.3, _prepare_environment() in cli_communication_protocol.py passes a full copy of os.environ to e…
CVE-2026-45369High8.32026-05-14python-utcp is the python implementation of UTCP. Prior to 1.1.3, the _substitute_utcp_args method in cli_communication_protocol.py inserts user-controlled too…
CVE-2026-44661Medium4.72026-05-14python-utcp is the python implementation of UTCP. Prior to 1.1.3, the utcp-http plugin is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a…