The vulnerability in python‑utcp allows an attacker to supply a tool URL that the system initially accepts but then follows downstream redirects without re‑validating the destination. This server‑side request forgery permits the malicious endpoint to return a 302 redirect pointing to internal or cloud metadata services, exposing those internal resources to the UTCP client. The impact includes unauthorized access to internal data and the potential for further escalation if sensitive services become reachable.

The affected product is python‑utcp, versions before 1.1.4, maintained by universal‑tool‑calling‑protocol. No additional vendor or product variants are listed in the CNA data.

The focus of exploitation is an attacker controlling a tool endpoint that can issue a 302 redirect; the UTCP client will blindly follow it and return the redirect target’s response. The CVSS score is 8.4, indicating high severity. The EPSS score is not available, so the likelihood of exploitation cannot be quantified from the provided data. The vulnerability is not listed in the CISA KEV catalog, but any instance that allows internal or cloud metadata to be accessed remains a significant risk because the attacker can read sensitive configuration or credentials.