rowboat vulnerabilities

2 known vulnerabilities in rowboat from Rowboatlabs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  rowboat: Improper Authentication

  CVE-2026-6635Apr 20, 2026Rowboatlabs

  A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the function tool_call of the file apps/experimental/tools_webhook/app.py of the component tools_webhook. Such manipulation of the argument X-Tools-JWE leads to improp

• 7.3 High severity

  rowboat: Improper Authentication

  CVE-2025-7115Jul 7, 2025Rowboatlabs

  A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by this issue is the function PUT of the file apps/rowboat/app/api/uploads/[fileId]/route.ts of the component Session Handl