Pinchtab

7 CVEs across 1 Pinchtab products. Browse Pinchtab vulnerabilities, severities, and proof-of-concept exploits.

Pinchtab products with known CVEs

ProductCVEs
Pinchtab7
Pinchtab CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-33623Medium6.72026-03-26PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.4` contains a Windows-only command injection iss…
CVE-2026-33622High8.82026-03-26PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.3` through `v0.8.5` allow arbitrary JavaScript e…
CVE-2026-33621Medium4.82026-03-26PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.7.7` through `v0.8.4` contain incomplete request-t…
CVE-2026-33620Medium4.32026-03-26PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.7.8` through `v0.8.3` accepted the API token from…
CVE-2026-33619Medium4.12026-03-26PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.3 contains a server-side request forgery issue in…
CVE-2026-33081Medium5.82026-03-20PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Versions 0.8.2 and below have a Blind SSRF vulnerability in the…
CVE-2026-30834High7.52026-03-07PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Prior to version 0.7.7, a Server-Side Request Forgery (SSRF) vu…