Is CVE-2026-45370 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-45370 being exploited in the wild.

How severe is CVE-2026-45370?

High severity, with a CVSS score of 7.7, published 14 May 2026.

Which products and versions are affected?

utcp-cli (PyPI) <= 1.1.1, ECOSYSTEM:introduced=0,fixed=1.1.2.

Is there a fix for CVE-2026-45370?

Yes. utcp-cli (PyPI): upgrade to 1.1.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-45370 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-45370?

Check whether you run utcp-cli (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-45370: python-utcp sensitive information exposure via environment variables

Q: Which products and versions are affected?

utcp-cli (PyPI) <= 1.1.1, ECOSYSTEM:introduced=0,fixed=1.1.2.

Q: Is there a fix for CVE-2026-45370?

Yes. utcp-cli (PyPI): upgrade to 1.1.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-45370 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-45370?

Check whether you run utcp-cli (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-45370 · Severity: high · CVSS 7.7 · Published 2026-05-14

A vulnerability in the python-utcp library, used for AI agent tool calling, allows sensitive system information to be leaked. When an attacker uses a command injection flaw, the library inadvertently shares all of the host's environment variables with the malicious process. This can result in the theft of critical secrets such as cloud credentials, database passwords, and AI service API keys.

Vendors: PyPI.

Quick answers

Is CVE-2026-45370 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-45370 being exploited in the wild.
How severe is CVE-2026-45370?: High severity, with a CVSS score of 7.7, published 14 May 2026.
Which products and versions are affected?: utcp-cli (PyPI) <= 1.1.1, ECOSYSTEM:introduced=0,fixed=1.1.2.
Is there a fix for CVE-2026-45370?: Yes. utcp-cli (PyPI): upgrade to 1.1.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-45370 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-45370?: Check whether you run utcp-cli (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

utcp-cli (PyPI): upgrade to 1.1.2 or later
```
pip install "utcp-cli>=1.1.2"
```

Technical details

The `_prepare_environment()` function in `cli_communication_protocol.py` uses `os.environ.copy()` to pass the entire host environment to every CLI subprocess. When combined with a separate command injection vulnerability (CWE-78) in argument substitution, an attacker can execute arbitrary commands that have access to all process-level environment variables. This typically includes sensitive credentials like AWS keys, database URLs, and LLM API keys. The vulnerability is fixed in version 1.1.2 by implementing a restricted allowlist for environment variable inheritance.

Affected products

universal-tool-calling-protocol utcp-cli <= 1.1.1

Identifiers

CVE-2026-45370
GHSA-5v57-8rxj-3p2r
PYSEC-2026-3395

Timeline

2026-05-10: disclosed
2026-05-14: advisory
2026-05-14: patched: Fixed in utcp-cli 1.1.2

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.