Read the docs
TI-2026-25523 Aliases CVE-2026-33081GHSA-qwxp-6qf9-wr4m

PinchTab has Blind SSRF via browser-side redirect bypass in /download URL validation

Priority LOW 32CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Versions 0.8.2 and below have a Blind SSRF vulnerability in the /download endpoint. The validateDownloadURL() function only checks the initial user-supplied URL, but the embedded Chromium browser can follow attacker-controlled redirects/navigations to internal network addresses after validation. Exploitation requires security.allowDownload=true (disabled by default), limiting real-world impact. An attacker-controlled page can use JavaScript redirects or resource requests to make the browser reach internal services from the PinchTab host, resulting in a blind Server-Side Request Forgery (SSRF) condition against internal-only services. The issue has been patched in version 0.8.3.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.003 22nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed pinchtab (pinchtab): 0.8.3github.com/pinchtab/pinchtab (Go): 0.8.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
pinchtabpinchtabbefore 0.8.30.8.3Patch availableCNA
—github.com/pinchtab/pinchtab (Go)before 0.8.30.8.3Patch availableGHSA-qwxp-6qf9-wr4m
  • pinchtab Vendorpinchtab Affected before 0.8.3 Fixed in 0.8.3 Patch available CNA
  • github.com/pinchtab/pinchtab (Go) Vendor— Affected before 0.8.3 Fixed in 0.8.3 Patch available GHSA-qwxp-6qf9-wr4m

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:pinchtab:pinchtab:*:*:*:*:*:*:*:*before 0.8.3Vulnerablepinchtab
  • cpe:2.3:a:pinchtab:pinchtab:*:*:*:*:*:*:*:* Versions before 0.8.3 Vulnerable ·pinchtab

Remediation

  • Fix · CNA pinchtab (pinchtab) Fixed in 0.8.3
  • Fix · GHSA-qwxp-6qf9-wr4m github.com/pinchtab/pinchtab (Go) Fixed in 0.8.3 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-33081
  2. 2026-10-03 Alias added: GHSA-qwxp-6qf9-wr4m

References

Exploit 1

Advisory 1

Other 2

  • TI-2026-23663 PinchTab: SSRF with Full Response Exfiltration via Download Handler CVSS 3.1HIGH 7.5
  • TI-2026-26005 PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution CVSS 3.1HIGH 7.2
  • TI-2026-26003 PinchTab: Unapplied Rate Limiting Middleware Allows Unbounded Brute-Force of API Token CVSS 3.1MEDIUM 6.5
  • TI-2026-26004 A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution CVSS 4.0MEDIUM 6.1
  • TI-2026-26001 PinchTab has Unauthenticated Blind SSRF in Task Scheduler via Unvalidated callbackUrl CVSS 3.1MEDIUM 5.5
  • TI-2026-26002 PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems CVSS 3.1MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences