CVE-2026-6635 - Vulnerability Details

- rowboatlabs rowboat tools_webhook app.py tool_call improper authentication

Description

A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the function tool_call of the file apps/experimental/tools_webhook/app.py of the component tools_webhook. Such manipulation of the argument X-Tools-JWE leads to improper authentication. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published: 2026-04-20

Score: 6.9 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The vulnerability is introduced by improper authentication in the tool_call function of apps/experimental/tools_webhook/app.py, where manipulation of the X-Tools-JWE HTTP header allows an attacker to bypass authentication. This authentication flaw can enable unauthorized parties to invoke the tool_call endpoint and potentially execute arbitrary code or operations that should be restricted. The weakness is classified as CWE-287 and exposes both confidentiality and integrity risks for systems relying on the RowBoat tools_webhook component.

Affected Systems

RowBoat Laboratories' RowBoat is affected up to version 0.1.67. Any deployment of RowBoat that includes the tools_webhook component and does not apply the latest fixes could be vulnerable. Because the CVE states the flaw exists in "rowboat up to 0.1.67", older releases are included while newer releases are presumed patched. Administrators should verify the exact version installed and consult RowBoat release notes for a fix.

Risk and Exploitability

The CVSS score of 6.9 indicates a moderate severity. The vulnerability can be exploited remotely, as it does not require local or authenticated access. EPSS data is unavailable, so the current exploitation likelihood is unclear, but the publicly disclosed exploit demonstrates that attacks are feasible. The CVE is not listed in CISA’s KEV catalog, but the presence of a public exploit warrants timely mitigation. The attack vector is presumably HTTP, where an attacker sends a crafted X-Tools-JWE header to gain unauthorized access.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

rowboatlabs

rowboat

affected

Version	Status	Constraints
`0.1.0`	affected	—
`0.1.1`	affected	—
`0.1.2`	affected	—
`0.1.3`	affected	—
`0.1.4`	affected	—
`0.1.5`	affected	—
`0.1.6`	affected	—
`0.1.7`	affected	—
`0.1.8`	affected	—
`0.1.9`	affected	—
`0.1.10`	affected	—
`0.1.11`	affected	—
`0.1.12`	affected	—
`0.1.13`	affected	—
`0.1.14`	affected	—
`0.1.15`	affected	—
`0.1.16`	affected	—
`0.1.17`	affected	—
`0.1.18`	affected	—
`0.1.19`	affected	—
`0.1.20`	affected	—
`0.1.21`	affected	—
`0.1.22`	affected	—
`0.1.23`	affected	—
`0.1.24`	affected	—
`0.1.25`	affected	—
`0.1.26`	affected	—
`0.1.27`	affected	—
`0.1.28`	affected	—
`0.1.29`	affected	—
`0.1.30`	affected	—
`0.1.31`	affected	—
`0.1.32`	affected	—
`0.1.33`	affected	—
`0.1.34`	affected	—
`0.1.35`	affected	—
`0.1.36`	affected	—
`0.1.37`	affected	—
`0.1.38`	affected	—
`0.1.39`	affected	—
`0.1.40`	affected	—
`0.1.41`	affected	—
`0.1.42`	affected	—
`0.1.43`	affected	—
`0.1.44`	affected	—
`0.1.45`	affected	—
`0.1.46`	affected	—
`0.1.47`	affected	—
`0.1.48`	affected	—
`0.1.49`	affected	—
`0.1.50`	affected	—
`0.1.51`	affected	—
`0.1.52`	affected	—
`0.1.53`	affected	—
`0.1.54`	affected	—
`0.1.55`	affected	—
`0.1.56`	affected	—
`0.1.57`	affected	—
`0.1.58`	affected	—
`0.1.59`	affected	—
`0.1.60`	affected	—
`0.1.61`	affected	—
`0.1.62`	affected	—
`0.1.63`	affected	—
`0.1.64`	affected	—
`0.1.65`	affected	—
`0.1.66`	affected	—
`0.1.67`	affected	—

No data.

Vendor Product Confidence Versions

Rowboatlabs

Rowboat

100%

Version	Status	Scheme	Platform
`0.1.0`	affected	semver	—
`0.1.1`	affected	semver	—
`0.1.2`	affected	semver	—
`0.1.3`	affected	semver	—
`0.1.4`	affected	semver	—
`0.1.5`	affected	semver	—
`0.1.6`	affected	semver	—
`0.1.7`	affected	semver	—
`0.1.8`	affected	semver	—
`0.1.9`	affected	semver	—
`0.1.10`	affected	semver	—
`0.1.11`	affected	semver	—
`0.1.12`	affected	semver	—
`0.1.13`	affected	semver	—
`0.1.14`	affected	semver	—
`0.1.15`	affected	semver	—
`0.1.16`	affected	semver	—
`0.1.17`	affected	semver	—
`0.1.18`	affected	semver	—
`0.1.19`	affected	semver	—
`0.1.20`	affected	semver	—
`0.1.21`	affected	semver	—
`0.1.22`	affected	semver	—
`0.1.23`	affected	semver	—
`0.1.24`	affected	semver	—
`0.1.25`	affected	semver	—
`0.1.26`	affected	semver	—
`0.1.27`	affected	semver	—
`0.1.28`	affected	semver	—
`0.1.29`	affected	semver	—
`0.1.30`	affected	semver	—
`0.1.31`	affected	semver	—
`0.1.32`	affected	semver	—
`0.1.33`	affected	semver	—
`0.1.34`	affected	semver	—
`0.1.35`	affected	semver	—
`0.1.36`	affected	semver	—
`0.1.37`	affected	semver	—
`0.1.38`	affected	semver	—
`0.1.39`	affected	semver	—
`0.1.40`	affected	semver	—
`0.1.41`	affected	semver	—
`0.1.42`	affected	semver	—
`0.1.43`	affected	semver	—
`0.1.44`	affected	semver	—
`0.1.45`	affected	semver	—
`0.1.46`	affected	semver	—
`0.1.47`	affected	semver	—
`0.1.48`	affected	semver	—
`0.1.49`	affected	semver	—
`0.1.50`	affected	semver	—
`0.1.51`	affected	semver	—
`0.1.52`	affected	semver	—
`0.1.53`	affected	semver	—
`0.1.54`	affected	semver	—
`0.1.55`	affected	semver	—
`0.1.56`	affected	semver	—
`0.1.57`	affected	semver	—
`0.1.58`	affected	semver	—
`0.1.59`	affected	semver	—
`0.1.60`	affected	semver	—
`0.1.61`	affected	semver	—
`0.1.62`	affected	semver	—
`0.1.63`	affected	semver	—
`0.1.64`	affected	semver	—
`0.1.65`	affected	semver	—
`0.1.66`	affected	semver	—
`0.1.67`	affected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade RowBoat to a patched release – newer versions that remove the vulnerability should be installed.
Restrict network access to the tools_webhook endpoint, for example by using firewall rules or limiting it to trusted IP ranges.
Validate and enforce proper authentication on incoming requests, ensuring the X‑Tools‑JWE header cannot be spoofed or omitted.

Generated by OpenCVE AI on April 20, 2026 at 13:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00061.

Exploitation poc

Automatable yes

Technical Impact partial

References

Link	Providers
https://github.com/Dave-gilmore-aus/security-advisories/blob/main/rowbat-advisory
https://vuldb.com/submit/793433
https://vuldb.com/vuln/358269
https://vuldb.com/vuln/358269/cti

History

Mon, 20 Apr 2026 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 20 Apr 2026 13:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Rowboatlabs Rowboatlabs rowboat
Vendors & Products		Rowboatlabs Rowboatlabs rowboat

Mon, 20 Apr 2026 12:00:00 +0000

Type	Values Removed	Values Added
Description		A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67. This impacts the function tool_call of the file apps/experimental/tools_webhook/app.py of the component tools_webhook. Such manipulation of the argument X-Tools-JWE leads to improper authentication. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title		rowboatlabs rowboat tools_webhook app.py tool_call improper authentication
Weaknesses		CWE-287
References		https://github.com/Dave-gilmore-aus/security-advisories/blob/main/rowbat-advisory https://vuldb.com/submit/793433 https://vuldb.com/vuln/358269 https://vuldb.com/vuln/358269/cti
Metrics		cvssV2_0 `{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}` cvssV3_0 `{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}` cvssV3_1 `{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}` cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Rowboatlabs Rowboat

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-04-20T11:45:12.769Z

Updated: 2026-04-20T13:26:31.802Z

Reserved: 2026-04-19T19:20:06.278Z

Link: CVE-2026-6635

Vulnrichment

Updated: 2026-04-20T13:26:28.365Z

NVD

Status : Received

Published: 2026-04-20T12:16:09.673

Modified: 2026-04-20T12:16:09.673

Link: CVE-2026-6635

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-04-20T13:30:05Z

Weaknesses

CWE-287

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Exploitation poc

Automatable yes

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object