@utcp/http versions before 1.1.14 contain a server-side request forgery (SSRF) vulnerability. This flaw allows attackers to bypass remote-loopback checks using a {host} placeholder, enabling access to internal loopback services such as 127.0.0.1. Attackers can exploit this by supplying crafted host arguments or registering tools via Streamable HTTP and SSE discovery to reach internal services on the agent machine.