Skip to content
OpenAdvisories

Package · Go

github.com/pinchtab/pinchtab

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.7
    CVE-2026-33623

    PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution

    PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.4` contains a Windows-only command injection issue in the orphaned Chrome cleanup path. When an instance is stopped, the Windows cleanup routine bui…

    pinchtab pinchtab github.com/pinchtab/pinchtab github.com/pinchtab/pinchtab/cmd/pinchtab Go
  • Medium 6.1
    CVE-2026-33622

    A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution

    PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.3` through `v0.8.5` allow arbitrary JavaScript execution through `POST /wait` and `POST /tabs/{id}/wait` when the request uses `fn` mode, even if `s…

    pinchtab pinchtab github.com/pinchtab/pinchtab github.com/pinchtab/pinchtab/cmd/pinchtab Go
  • Medium 4.8
    CVE-2026-33621

    PinchTab: Unapplied Rate Limiting Middleware Allows Unbounded Brute-Force of API Token

    PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.7.7` through `v0.8.4` contain incomplete request-throttling protections for auth-checkable endpoints. In `v0.7.7` through `v0.8.3`, a fully implemente…

    pinchtab pinchtab github.com/pinchtab/pinchtab Go
  • Medium 4.3
    CVE-2026-33620

    PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems

    PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.7.8` through `v0.8.3` accepted the API token from a `token` URL query parameter in addition to the `Authorization` header. When a valid API credential…

    pinchtab pinchtab github.com/pinchtab/pinchtab Go
  • Medium 4.1
    CVE-2026-33619

    PinchTab has Unauthenticated Blind SSRF in Task Scheduler via Unvalidated callbackUrl

    PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.3 contains a server-side request forgery issue in the optional scheduler's webhook delivery path. When a task is submitted to `POST /tasks` with a us…

    pinchtab pinchtab github.com/pinchtab/pinchtab Go
  • Medium 5.8
    CVE-2026-33081

    PinchTab has Blind SSRF via browser-side redirect bypass in /download URL validation

    PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Versions 0.8.2 and below have a Blind SSRF vulnerability in the /download endpoint. The validateDownloadURL() function only checks the initial user-supplied URL, b…

    pinchtab pinchtab github.com/pinchtab/pinchtab Go