{"data":{"id":"6f728eb9-c118-41b8-adcf-d65ac065264b","title":"GHSA-5v57-8rxj-3p2r: python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection","summary":"python-utcp's `_prepare_environment()` in `cli_communication_protocol.py` passes a full copy of `os.environ` to every CLI subprocess. Combined with the Command Injection flaw in `_substitute_utcp_args()` (GHSA-33p6-5jxp-p3x4), an attacker can exfiltrate all process-level secrets, including cloud credentials, database strings and LLM API keys, in a single tool call. The issue is fixed in `utcp-cli` 1.1.2, which adds a `CliCallTemplate.inherit_env_vars` field to control inheritance.","solution":"Upgrade to `utcp-cli >= 1.1.2`. There is no workaround in earlier versions short of stripping secrets from the host process before any CLI tool call.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-5v57-8rxj-3p2r","publishedAt":"2026-05-14T20:56:07.000Z","cveId":"CVE-2026-45370","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain","pii_leakage"],"issueType":"vulnerability","affectedPackages":["utcp-cli@<= 1.1.1 (fixed: 1.1.2)"],"affectedPackageNames":["utcp-cli"],"affectedPackageRefs":["pypi:utcp-cli"],"affectedVendors":["OpenAI","Anthropic"],"affectedVendorsRaw":["utcp-cli","OPENAI_API_KEY","ANTHROPIC_API_KEY"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00371,"epssCheckedAt":"2026-10-14T06:09:08.182Z","kevDateAdded":null,"advisoryAliases":["GHSA-5v57-8rxj-3p2r"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-14T20:56:07.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}