CVE-2026-33623: PinchTab command injection in Windows Chrome cleanup path

Summary

PinchTab v0.8.4, a standalone HTTP server that gives AI agents control over Chrome, has a Windows-only command injection flaw in its orphaned Chrome cleanup path. The cleanup routine builds a PowerShell -Command string from a profile-derived needle, and the escaping only neutralizes backslashes, not other PowerShell metacharacters. An attacker with authenticated, administrative-equivalent access to instance lifecycle endpoints who launches an instance with a crafted profile name and triggers cleanup can run arbitrary PowerShell commands as the PinchTab OS user, not unauthenticated and without bypassing host privilege boundaries.

Mitigation

Fixed in 0.8.5.

Topics

• AI agents

Related items

• HighCVE-2026-97677: IBM Langflow OSS arbitrary file write and read by authenticated flow authorsSimilar attack · NVD/CVE Database
• MediumRecent AI agent experiments reveal a risky future of machine 'teamwork' inside corporationsSimilar attack · CNBC Technology
• MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News
• MediumCVE-2026-118046: JS Help Desk plugin stored DOM-based cross-site scripting via jsticket_messageSimilar attack · NVD/CVE Database
• MediumARTEX abuse expands as cybercriminals target financial sectorSimilar attack · Microsoft Security Blog