{"data":{"id":"b7916b7d-fa0e-457c-be15-7b545eaf46c2","title":"CVE-2026-33622: PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.3`…","summary":"PinchTab v0.8.3 through v0.8.5 let a caller with the server token run arbitrary JavaScript in a tab through POST /wait and POST /tabs/{id}/wait when fn mode is used, even with security.allowEvaluate disabled. POST /evaluate enforces that guard, but /wait embedded the user-supplied fn expression into executable JavaScript without checking it. The flaw is a policy bypass rather than an authentication bypass, since authenticated API access is still required.","solution":"The current worktree applies the same policy boundary to fn mode in /wait that already exists on /evaluate, while preserving the non-code wait modes. As of publication, a patched version is not yet available.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-33622","publishedAt":"2026-03-26T21:17:06.780Z","cveId":"CVE-2026-33622","cweIds":["CWE-94","CWE-284","CWE-693"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/pinchtab/pinchtab/cmd/pinchtab@>= 0.8.3, <= 0.8.5","github.com/pinchtab/pinchtab@>= 0.8.3"],"affectedPackageNames":["github.com/pinchtab/pinchtab/cmd/pinchtab","github.com/pinchtab/pinchtab"],"affectedPackageRefs":["go:github.com/pinchtab/pinchtab/cmd/pinchtab","go:github.com/pinchtab/pinchtab"],"affectedVendors":[],"affectedVendorsRaw":["PinchTab"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PinchTab arbitrary JavaScript execution through POST /wait fn mode","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00532,"epssCheckedAt":"2026-11-10T18:05:34.521Z","kevDateAdded":null,"advisoryAliases":["GHSA-w5pc-m664-r62v"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:13.676Z","patchAvailable":null,"disclosureDate":"2026-03-26T21:17:06.780Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}