CyberSecBulletin

Rowboatlabs vulnerabilities

We track 2 vulnerabilities in Rowboatlabs products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 20, 2026.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Rowboatlabs vulnerabilities

  • 7.3 High severity

    rowboat: Improper Authentication

    CVE-2026-6635Rowboatlabs

    A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the function tool_call of the file apps/experimental/tools_webhook/app.py of the component tools_webhook. Such manipulation of the argument X-Tools-JWE leads to improp

  • 7.3 High severity

    rowboat: Improper Authentication

    CVE-2025-7115Rowboatlabs

    A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by this issue is the function PUT of the file apps/rowboat/app/api/uploads/[fileId]/route.ts of the component Session Handl