CVE-2026-101059

HighCVSS 7.1

Published: 27/09/2026(UTC)Updated: 30/09/2026(UTC)Translated: 28/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

utcp-http before version 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints. When a victim registers an attacker-controlled OpenAPI spec and invokes a generated OAuth2-protected tool, the library POSTs the victim's client_id and client_secret to the attacker-supplied token endpoint without URL validation.

Risk Assessment

The risk is the theft of OAuth2 credentials (client_id and client_secret) from users, which could lead to unauthorized access to protected resources and account compromise.

Recommendation

Upgrade utcp-http to version 1.1.4 or later, which includes a fix for tokenUrl URL validation.

Other vulnerabilities in utcp-http

CVE-2026-45366Medium
The @utcp/http library before version 1.1.2 is vulnerable to blind Server-Side Request Forgery (SSRF). The flaw is caused by a trust-boundary inconsistency between manual discovery and tool invocation, where callTool() does not revalidate the URL and OpenApiConverter blindly trusts malicious OpenAPI specs.

Original NVD description (English source)

utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attackers to redirect credential submission to arbitrary endpoints. When a victim registers an attacker-controlled OpenAPI spec and invokes a generated OAuth2-protected tool, the library POSTs the victim's client_id and client_secret to the attacker-supplied token endpoint without URL validation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS