CVE-2026-86122

MediumCVSS 5.0

Published: 05/09/2026(UTC)Updated: 23/09/2026(UTC)Translated: 05/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at internal services and cloud metadata endpoints to perform server-side request forgery and enumerate internal network topology.

Risk Assessment

The risk includes unauthorized access to internal resources and sensitive cloud data, potentially leading to confidentiality and integrity breaches.

Recommendation

Update Rowboat to the latest version that includes URL validation fixes. Additionally, restrict configuration of webhooks and MCP servers to trusted users only.

Other vulnerabilities in Rowboat

CVE-2026-84856Medium
A denial of service vulnerability was found in rowboatlabs rowboat up to version 0.9.1, affecting the request.text/req.json function in the file apps/rowboat/app/api/composio/webhook/route.ts of the Composio Webhook Endpoint component. The attack can be launched remotely. Version 0.9.2 resolves the issue but removes the legacy Next.js app without security controls.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS