CVE-2026-33622 A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution
Authenticated attackers can execute arbitrary JavaScript in PinchTab via /wait endpoints, bypassing the disabled security policy for code evaluation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-33622?
CVE-2026-33622 is a medium-severity code injection vulnerability in pinchtab, published on 26 Mar 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.3` through `v0.8.5` allow arbitrary JavaScript execution through `POST /wait` and `POST /tabs/{id}/wait` when the request uses `fn` mode, even if `security.allowEvaluate` is disabled. `POST /evaluate` correctly enforces the `security.allowEvaluate` guard, which is disabled by default. However, in the affected releases, `POST /wait` accepted a user-controlled `fn` expression, embedded it directly into executable JavaScript, and evaluated it in the browser context without checking the same policy. This is a security-policy bypass rather than a separate authentication bypass. Exploitation still requires authenticated API access, but a caller with the server token can execute arbitrary JavaScript in a tab context even when the operator explicitly disabled JavaScript evaluation. The current worktree fixes this by applying the same policy boundary to `fn` mode in `/wait` that already exists on `/evaluate`, while preserving the non-code wait modes. As of time of publication, a patched version is not yet available.
Which versions are affected by CVE-2026-33622?
5 open source packages ship an affected version, including github.com/pinchtab/pinchtab and github.com/pinchtab/pinchtab/cmd/pinchtab. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/pinchtab/pinchtab Go | From 0.8.3 | None |
github.com/pinchtab/pinchtab Go | From 0.8.3 | None |
github.com/pinchtab/pinchtab Go | From 0.8.3 | None |
github.com/pinchtab/pinchtab/cmd/pinchtab Go | From 0.8.3 to 0.8.5 | None |
github.com/pinchtab/pinchtab/cmd/pinchtab Go | From 0.8.3 to 0.8.5 | None |
Products include Pinchtab Pinchtab.
How do I fix CVE-2026-33622?
No fix published yet.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-33622 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-33622 exists.
Other vulnerabilities in pinchtab
- CVE-2026-30834 PinchTab: SSRF with Full Response Exfiltration via Download Handler
- CVE-2026-33623 PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution
- CVE-2026-33081 PinchTab has Blind SSRF via browser-side redirect bypass in /download URL validation
- CVE-2026-33621 PinchTab: Unapplied Rate Limiting Middleware Allows Unbounded Brute-Force of API Token
- CVE-2026-33620 PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems
Sources
Also known as GHSA-w5pc-m664-r62v, GO-2026-4824.