7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-14542

CVE-2025-14542: Universal Tool Calling Protocol (UTCP) client library for Python vulnerable to Trust Boundary Violation through Manual JSON specification

The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients’ trust, a malicious provider can later change the manual to exploit the client.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-14542

CVE-2025-14542:

7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
utcp	pip	< 1.1.0	1.1.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability in the python-utcp library is a trust boundary violation where the client can be tricked into executing malicious code. This occurs when a remote tool manual, initially benign, is updated by a malicious provider to include tools with dangerous communication protocols (e.g., 'cli'). The client, trusting the manual, would register and execute these tools.

The root cause is the lack of protocol validation in versions prior to 1.1.0. The analysis of the patch commit 2dc9c02df72cad3770c934959325ec344b441444 reveals that the mitigation involves adding a new allowed_communication_protocols field to manuals and enforcing checks at two critical stages:

Registration Time (UtcpClientImplementation.register_manual): The original code registered all tools from a manual without question. The patch introduces filtering logic to ensure that only tools with protocols explicitly allowed by the manual are registered.
Call Time (UtcpClientImplementation.call_tool and UtcpClientImplementation.call_tool_streaming): The original code would execute any registered tool. The patch adds a pre-execution check to validate that the tool's protocol is permitted by its parent manual, preventing the execution of a maliciously registered tool.

Therefore, the functions register_manual, call_tool, and call_tool_streaming are identified as the key vulnerable functions. During an exploit, these functions would be present in a runtime profile, first registering the malicious tool and then executing it, leading to the security compromise.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.