CVE-2026-45370 Details
Description
python-utcp is the python implementation of UTCP. Prior to 1.1.3, _prepare_environment() in cli_communication_protocol.py passes a full copy of os.environ to every CLI subprocess. When combined with CVE-2026-45369, an attacker can exfiltrate all process-level secrets in a single tool call. This vulnerability is fixed in 1.1.3.
A vulnerability in python-utcp, specifically in versions prior to 1.1.2, allows for the exfiltration of process-level secrets through environment variable exposure. The issue arises because the function '_prepare_environment()' in 'cli_communication_protocol.py' passes a complete copy of 'os.environ' to every CLI subprocess. This vulnerability can be exploited in conjunction with a command injection vulnerability, leading to the leakage of sensitive information such as cloud provider credentials, database connection strings, LLM API keys, and internal service tokens.
Upgrade to python-utcp version 1.1.2 or later. In the patched version, the '_prepare_environment()' function no longer exposes the full host environment to subprocesses. Instead, environment variable inheritance is controlled by a new 'CliCallTemplate.inherit_env_vars' field, allowing for more precise management of which variables are passed to CLI tools.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 14, 2026CISA-ADP
Assessed May 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/universal-tool-calling-protocol/python-utcp/security/advisories/GHSA-5v57-8rxj-3p2r | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/universal-tool-calling-protocol/python-utcp/security/advisories/GHSA-5v57-8rxj-3p2r | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-526 | Cleartext Storage of Sensitive Information in an Environment Variable | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| python-utcp | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 15, 2026 | CVE Modified | CISA-ADP |
| May 14, 2026 | New CVE Received | [email protected] |