CVE-2026-33622 — PinchTab is a standalone HTTP server that gives AI agents direct control over a…
Image via assets
🚨 CVE-2026-33622 PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.3` through `v0.8.5` allow arbitrary JavaScript…
What This Means For You
- Affects Google ecosystem — review Chrome/Android/GCP deployments.
- New vulnerability disclosed — verify if your stack is exposed.
- New tool or resource available — evaluate for your security workflow.
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| CVE-2026-33622 | Code Injection | PinchTab v0.8.3 through v0.8.5 allows arbitrary JavaScript execution. |
Source & Attribution
| Source Platform | Telegram |
| Channel | CVE Notify |
| Channel ID | 1129491012 |
| Message ID | 157419 |
| Published | March 31, 2026 at 19:26 UTC |
| Original Link | https://github.com/pinchtab/pinchtab/security/advisories/... |
This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.
Believe this infringes your rights? Submit a takedown request.
Found this interesting? Follow us on LinkedIn to stay ahead.
Share