rowboatlabs rowboat

2 known vulnerabilities in rowboatlabs rowboat, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-86122 CVSS 5.3 medium Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary…
  • CVE-2026-84856 CVSS 5.5 medium A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.json of the file…