Read the docs
TI-2026-23663 Aliases CVE-2026-30834GHSA-rw8p-c6hf-q3pg

PinchTab: SSRF with Full Response Exfiltration via Download Handler

Priority HIGH 72CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-918 and the CVSS impact.

Summary

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Prior to version 0.7.7, a Server-Side Request Forgery (SSRF) vulnerability in the /download endpoint allows any user with API access to induce the PinchTab server to make requests to arbitrary URLs, including internal network services and local system files, and exfiltrate the full response content. This issue has been patched in version 0.7.7.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00467 40th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed pinchtab (pinchtab): 0.7.7github.com/pinchtab/pinchtab/cmd/pinchtab (Go): 0.7.7

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
pinchtabpinchtabbefore 0.7.70.7.7Patch availableCNA
—github.com/pinchtab/pinchtab/cmd/pinchtab (Go)before 0.7.70.7.7Patch availableGHSA-rw8p-c6hf-q3pg
  • pinchtab Vendorpinchtab Affected before 0.7.7 Fixed in 0.7.7 Patch available CNA
  • github.com/pinchtab/pinchtab/cmd/pinchtab (Go) Vendor— Affected before 0.7.7 Fixed in 0.7.7 Patch available GHSA-rw8p-c6hf-q3pg

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:pinchtab:pinchtab:*:*:*:*:*:*:*:*before 0.7.7Vulnerablepinchtab
  • cpe:2.3:a:pinchtab:pinchtab:*:*:*:*:*:*:*:* Versions before 0.7.7 Vulnerable ·pinchtab

Remediation

  • Fix · CNA pinchtab (pinchtab) Fixed in 0.7.7
  • Fix · GHSA-rw8p-c6hf-q3pg github.com/pinchtab/pinchtab/cmd/pinchtab (Go) Fixed in 0.7.7 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-30834
  2. 2026-10-03 Alias added: GHSA-rw8p-c6hf-q3pg

References

Exploit 1

Advisory 1

Other 1

  • TI-2026-26005 PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution CVSS 3.1HIGH 7.2
  • TI-2026-26003 PinchTab: Unapplied Rate Limiting Middleware Allows Unbounded Brute-Force of API Token CVSS 3.1MEDIUM 6.5
  • TI-2026-26004 A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution CVSS 4.0MEDIUM 6.1
  • TI-2026-26001 PinchTab has Unauthenticated Blind SSRF in Task Scheduler via Unvalidated callbackUrl CVSS 3.1MEDIUM 5.5
  • TI-2026-26002 PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems CVSS 3.1MEDIUM 4.3
  • TI-2026-25523 PinchTab has Blind SSRF via browser-side redirect bypass in /download URL validation CVSS 3.1MEDIUM 5.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences