CVE-2026-129094
MEDIUM
NVD
CVSS Score
4.7
Severity
MEDIUM
Published
Nov 13, 2026
Vendor
unknown
Description
@utcp/http before 1.1.14 contains a server-side request forgery vulnerability that allows remote manuals to reach loopback services by bypassing the remote-loopback check with a {host} placeholder. Attackers can supply host arguments like 127.0.0.1 or register tools via Streamable HTTP and SSE discovery to access internal services on the agent machine.
References
- https://github.com/universal-tool-calling-protocol/typescript-utcp/pull/58
- https://github.com/universal-tool-calling-protocol/typescript-utcp/pull/60
- https://github.com/universal-tool-calling-protocol/typescript-utcp/security/advisories/GHSA-r8j5-8747-88cm
- https://www.npmjs.com/package/@utcp/http
- https://www.vulncheck.com/advisories/utcp-http-before-1.1.14-ssrf-to-loopback-via-host-placeholder-in-call-templates