CVE-2026-129094: SSRF
@utcp/http before 1.1.14 contains a server-side request forgery vulnerability that allows remote manuals to reach loopback services by bypassing the remote-loopback check with a {host} placeholder. Attackers can supply host arguments like 127.0.0.1 or register tools via Streamable HTTP and SSE discovery to access internal services on the agent machine.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments using @utcp/http versions before 1.1.14 are affected. Exposure involves agents that can process attacker-supplied host arguments or discover tools through Streamable HTTP or SSE.
What does an attacker need to exploit the vulnerability?
An attacker must be able to provide host arguments, such as 127.0.0.1, using the {host} placeholder bypass, or register tools through Streamable HTTP or SSE discovery. Exploitation also requires user interaction and has high attack complexity according to the supplied vector.
What could an attacker access if exploitation succeeds?
The vulnerability can allow requests to loopback and other internal services reachable from the agent machine. The supplied severity vector indicates low impacts to confidentiality and integrity for both the vulnerable and subsequent systems, with no availability impact.
What version should be used to remediate the issue?
Upgrade @utcp/http to version 1.1.14 or later. The issue affects versions before 1.1.14.