CVE-2026-33620

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.7.8` through `v0.8.3` accepted the API token from a `token` URL query parameter in addition to the `Authorization` header. When a valid API credential is sent in the URL, it can be exposed through request URIs recorded by intermediaries or client-side tooling, such as reverse proxy access logs, browser history, shell history, clipboard history, and tracing systems that capture full URLs. This issue is an unsafe credential transport pattern rather than a direct authentication bypass. It only affects deployments where a token is configured and a client actually uses the query-parameter form. PinchTab's security guidance already recommended `Authorization: Bearer <token>`, but `v0.8.3` still accepted `?token=` and included first-party flows that generated and consumed URLs containing the token. This was addressed in v0.8.4 by removing query-string token authentication and requiring safer header- or session-based authentication flows.

• CWE-598

• https://github.com/pinchtab/pinchtab/releases/tag/v0.8.4Product, Release Notes
• https://github.com/pinchtab/pinchtab/security/advisories/GHSA-mrqc-3276-74f8Exploit, Mitigation, Vendor Advisory
• https://github.com/pinchtab/pinchtab/security/advisories/GHSA-mrqc-3276-74f8Exploit, Mitigation, Vendor Advisory

Published

Mar 26, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33615An unauthenticated remote attacker can exploit an unauthenti…9.1
• CVE-2026-33616An unauthenticated remote attacker can exploit an unauthenti…7.5
• CVE-2026-33617An unauthenticated remote attacker can access a configuratio…5.3
• CVE-2026-33618Chamilo LMS is a learning management system. Prior to .0.0-R…8.8
• CVE-2026-33619PinchTab is a standalone HTTP server that gives AI agents di…5.5
• CVE-2026-3362The Short Comment Filter plugin for WordPress is vulnerable …4.4
• CVE-2026-33621PinchTab is a standalone HTTP server that gives AI agents di…6.5
• CVE-2026-33622PinchTab is a standalone HTTP server that gives AI agents di…8.8
• CVE-2026-33623PinchTab is a standalone HTTP server that gives AI agents di…7.2
• CVE-2026-33624Parse Server is an open source backend that can be deployed …2.7
• CVE-2026-33626LMDeploy is a toolkit for compressing, deploying, and servin…7.5
• CVE-2026-33627Parse Server is an open source backend that can be deployed …6.5