CVE-2026-33619: PinchTab server-side request forgery in scheduler webhook delivery

Summary

PinchTab v0.8.3 contains a server-side request forgery issue in the optional scheduler's webhook delivery path. When a task submitted to POST /tasks has a user-controlled callbackUrl, the server sends an outbound POST to that URL without rejecting loopback or private destinations, and it follows redirects, enabling blind SSRF toward attacker-chosen targets reachable from the server. The scheduler is off by default, and in token-protected deployments the attacker must already hold the master API token.

Mitigation

Fixed in v0.8.4, which validates callback targets before dispatch, rejects non-public IP ranges, pins delivery to validated IPs, disables redirect following, and validates callbackUrl during task submission.

Topics

• AI agents

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News