Vulnerability · Published Sep 5, 2026 · Assigned by VulnCheck
CVE-2026-86122Rowboat through 0.9.1 Server-Side Request Forgery via Custom MCP Server
Medium 5.0
In plain English
A medium-severity server-side request forgery in rowboat from rowboatlabs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 3.1)5.0Medium
Exploit odds (30 days)0.4%top 68.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at internal services and cloud metadata endpoints to perform server-side request forgery and enumerate internal network topology.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| rowboatlabs | rowboat | 0 – through 0.9.1 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
References
- GitHub Issue #621 issue-tracking
- validateHttpHttpsUrl scheme-only check technical-description
- Unvalidated webhook fetch and MCP client connect technical-description
- https://github.com/rowboatlabs/rowboat product
- VulnCheck Advisory: Rowboat through 0.9.1 Server-Side Request Forgery via Custom MCP Server third-party-advisory