CVE-2025-14542

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14542", "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "state": "PUBLISHED", "assignerShortName": "JFROG", "dateReserved": "2025-12-11T13:46:59.266Z", "datePublished": "2025-12-13T09:59:41.376Z", "dateUpdated": "2025-12-13T22:54:11.290Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://pypi.org/project/pip", "packageName": "utcp", "versions": [{"lessThan": "1.1.0", "status": "affected", "version": "0", "versionType": "python"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>The vulnerability arises when a client fetches a tools\u2019 JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients\u2019 trust, a malicious provider can later change the manual to exploit the client.</p>"}], "value": "The vulnerability arises when a client fetches a tools\u2019 JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients\u2019 trust, a malicious provider can later change the manual to exploit the client."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-501", "description": "CWE-501 Trust Boundary Violation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "shortName": "JFROG", "dateUpdated": "2025-12-13T09:59:41.376Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://research.jfrog.com/vulnerabilities/python-utcp-untrusted-manual-command-execution-jfsa-2025-001648329/"}, {"tags": ["patch"], "url": "https://github.com/universal-tool-calling-protocol/python-utcp/commit/2dc9c02df72cad3770c934959325ec344b441444"}], "source": {"discovery": "EXTERNAL"}, "title": "Command execution in python-utcp allows attackers to achieve remote code execution when fetching a remote Manual from a malicious endpoint"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-13T22:54:03.708584Z", "id": "CVE-2025-14542", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-13T22:54:11.290Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-14542", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-12-13T22:54:03.708584Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-13T22:54:08.271Z"}}], "cna": {"title": "Command execution in python-utcp allows attackers to achieve remote code execution when fetching a remote Manual from a malicious endpoint", "source": {"discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"versions": [{"status": "affected", "version": "0", "lessThan": "1.1.0", "versionType": "python"}], "packageName": "utcp", "collectionURL": "https://pypi.org/project/pip"}], "references": [{"url": "https://research.jfrog.com/vulnerabilities/python-utcp-untrusted-manual-command-execution-jfsa-2025-001648329/", "tags": ["third-party-advisory"]}, {"url": "https://github.com/universal-tool-calling-protocol/python-utcp/commit/2dc9c02df72cad3770c934959325ec344b441444", "tags": ["patch"]}], "descriptions": [{"lang": "en", "value": "The vulnerability arises when a client fetches a tools\u2019 JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients\u2019 trust, a malicious provider can later change the manual to exploit the client.", "supportingMedia": [{"type": "text/html", "value": "<p>The vulnerability arises when a client fetches a tools\u2019 JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients\u2019 trust, a malicious provider can later change the manual to exploit the client.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-501", "description": "CWE-501 Trust Boundary Violation"}]}], "providerMetadata": {"orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "shortName": "JFROG", "dateUpdated": "2025-12-13T09:59:41.376Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14542", "state": "PUBLISHED", "dateUpdated": "2025-12-13T22:54:11.290Z", "dateReserved": "2025-12-11T13:46:59.266Z", "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "datePublished": "2025-12-13T09:59:41.376Z", "assignerShortName": "JFROG"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://pypi.org/project/pip", "packageName": "utcp", "versions": [{"lessThan": "1.1.0", "status": "affected", "version": "0", "versionType": "python"}]}], "source": "reefs@jfrog.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The vulnerability arises when a client fetches a tools\u2019 JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients\u2019 trust, a malicious provider can later change the manual to exploit the client."}, {"lang": "es", "value": "La vulnerabilidad surge cuando un cliente obtiene una especificaci\u00f3n JSON de herramientas, conocida como un Manual, desde un Manual Endpoint remoto. Si bien un proveedor puede servir inicialmente un manual benigno (por ejemplo, uno que defina una llamada a herramienta HTTP), gan\u00e1ndose la confianza de los clientes, un proveedor malicioso puede cambiar posteriormente el manual para explotar al cliente."}], "id": "CVE-2025-14542", "lastModified": "2026-10-14T13:10:00.187", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.9, "source": "reefs@jfrog.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14542", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-12-13T22:54:03.708584Z", "version": "2.0.3"}}]}, "published": "2025-12-13T16:16:51.407", "references": [{"source": "reefs@jfrog.com", "url": "https://github.com/universal-tool-calling-protocol/python-utcp/commit/2dc9c02df72cad3770c934959325ec344b441444"}, {"source": "reefs@jfrog.com", "url": "https://research.jfrog.com/vulnerabilities/python-utcp-untrusted-manual-command-execution-jfsa-2025-001648329/"}], "sourceIdentifier": "reefs@jfrog.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-501"}], "source": "reefs@jfrog.com", "type": "Secondary"}]}

{}

{"created": "2025-12-14T21:14:43.749357+00:00", "updated": "2025-12-14T21:14:43.749382+00:00", "vendors": ["utcp", "utcp$PRODUCT$utcp"]}