CVE-2026-33622

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.3` through `v0.8.5` allow arbitrary JavaScript execution through `POST /wait` and `POST /tabs/{id}/wait` when the request uses `fn` mode, even if `security.allowEvaluate` is disabled. `POST /evaluate` correctly enforces the `security.allowEvaluate` guard, which is disabled by default. However, in the affected releases, `POST /wait` accepted a user-controlled `fn` expression, embedded it directly into executable JavaScript, and evaluated it in the browser context without checking the same policy. This is a security-policy bypass rather than a separate authentication bypass. Exploitation still requires authenticated API access, but a caller with the server token can execute arbitrary JavaScript in a tab context even when the operator explicitly disabled JavaScript evaluation. The current worktree fixes this by applying the same policy boundary to `fn` mode in `/wait` that already exists on `/evaluate`, while preserving the non-code wait modes. As of time of publication, a patched version is not yet available.

• CWE-94
• CWE-284
• CWE-693

• https://github.com/pinchtab/pinchtab/security/advisories/GHSA-w5pc-m664-r62vExploit, Mitigation, Vendor Advisory

Published

Mar 26, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33617An unauthenticated remote attacker can access a configuratio…5.3
• CVE-2026-33618Chamilo LMS is a learning management system. Prior to .0.0-R…8.8
• CVE-2026-33619PinchTab is a standalone HTTP server that gives AI agents di…5.5
• CVE-2026-3362The Short Comment Filter plugin for WordPress is vulnerable …4.4
• CVE-2026-33620PinchTab is a standalone HTTP server that gives AI agents di…4.3
• CVE-2026-33621PinchTab is a standalone HTTP server that gives AI agents di…6.5
• CVE-2026-33623PinchTab is a standalone HTTP server that gives AI agents di…7.2
• CVE-2026-33624Parse Server is an open source backend that can be deployed …2.7
• CVE-2026-33626LMDeploy is a toolkit for compressing, deploying, and servin…7.5
• CVE-2026-33627Parse Server is an open source backend that can be deployed …6.5
• CVE-2026-33628Invoice Ninja is a source-available invoice, quote, project …5.4
• CVE-2026-33631ClearanceKit intercepts file-system access events on macOS a…8.7