CVE-2026-30834CWE-918

PinchTab: SSRF with Full Response Exfiltration via Download Handler

High · published March 7, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Prior to version 0.7.7, a Server-Side Request Forgery (SSRF) vulnerability in the /download endpoint allows any user with API access to induce the PinchTab server to make requests to arbitrary URLs, including internal network services and local system files, and exfiltrate the full response content. This issue has been patched in version 0.7.7.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-03-07T15:36Z
EPSS history
Timeline
  • 07 MAR 15:36Z
    PinchTab: SSRF with Full Response Exfiltration via Download Handler
    cvelistv5