Vendor

pinchtab

7 known vulnerabilities.

Products

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2026-30834

PinchTab: SSRF with Full Response Exfiltration via Download Handler

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Prior to version 0.7.7, a Server-Side Request Forgery (SSRF) vulnerability in the /download endpoint allows any user with API access to induce the PinchTab server …

pinchtab pinchtab github.com/pinchtab/pinchtab github.com/pinchtab/pinchtab/cmd/pinchtab Go

Mar 7, 2026