CVE-2026-129094

CVSS 4.7 (medium) · published 2026-11-13

@utcp/http before 1.1.14 contains a server-side request forgery vulnerability that allows remote manuals to reach loopback services by bypassing the remote-loopback check with a {host} placeholder. Attackers can supply host arguments like 127.0.0.1 or register tools via Streamable HTTP and SSE discovery to access internal services on the agent machine.

Weakness: CWE-918

Source: NVD CVE-2026-129094

References

• https://github.com/universal-tool-calling-protocol/typescript-utcp/pull/58
• https://github.com/universal-tool-calling-protocol/typescript-utcp/pull/60
• https://github.com/universal-tool-calling-protocol/typescript-utcp/security/advisories/GHSA-r8j5-8747-88cm
• https://www.npmjs.com/package/@utcp/http
• https://www.vulncheck.com/advisories/utcp-http-before-1.1.14-ssrf-to-loopback-via-host-placeholder-in-call-templates

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.