Skip to content
Rrowboatlabs
Products
| Product | CVEs | Exploited | Latest |
| rowboat | 4 | – | Sep 5, 2026 |
Exploited and recent CVEs
-
CVE-2026-86122
Medium 5.0
Rowboat through 0.9.1 Server-Side Request Forgery via Custom MCP Server
0.4%
-
CVE-2026-84856
Medium 5.3
rowboatlabs rowboat Composio Webhook Endpoint route.ts req.json denial of service
0.7%
-
CVE-2026-6635
High 7.3
rowboatlabs rowboat tools_webhook app.py tool_call improper authentication
0.5%
-
CVE-2025-7115
High 7.3
rowboatlabs rowboat Session route.ts PUT missing authentication
0.5%