GCVE - cpe:2.3:a:universal-tool-calling-protocol:typescript-utcp:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:universal-tool-calling-protocol:typescript-utcp:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Universal Tool Calling Protocol (`be678bbd-9c02-569b-8f48-2bf4237dbf29`)
Product	Typescript Utcp (`137312ca-500a-55ee-baf9-27e6333f6484`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-45366`	vulnerable	2026-06-08 08:05:11.718592	typescript-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol MEDIUM (4.7) typescript-utcp is a typescript implementation of UTCP. Prior to 1.1.2, the @utcp/http package is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundary inconsistency between manual discovery and tool invocation. registerManual() validates the discovery URL against an HTTPS / loopback allowlist, but callTool() reuses the resolved toolCallTemplate.url directly without revalidating, and the OpenApiConverter blindly trusts whatever servers[0].url an attacker-hosted spec declares. An attacker who hosts a malicious OpenAPI spec on a legitimate HTTPS endpoint can declare e.g. servers: [{ url: "http://127.0.0.1:9090" }] or servers: [{ url: "http://169.254.169.254" }]; the converter then produces tools whose URL points at internal services on the agent host. This vulnerability is fixed in 1.1.2. Published: 2026-05-28T20:38:16.780Z Updated: 2026-05-29T13:56:10.659Z Open on db.gcve.eu Reference links https://github.com/universal-tool-calling-protocol/typescript-utcp/security/advisories/GHSA-r8j5-8747-88cm	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.