Detections
Analytics

SCA: security update for github.com/pinchtab/pinchtab (GHSA-xqq2-4j46-vwp7)

medium Tenable Self-Hosted Container Security Plugin ID 439172

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab
 v0.8.3 contains a server-side request forgery issue in the optional scheduler's webhook delivery path.
 When a task is submitted to `POST /tasks` with a user-controlled `callbackUrl`, the v0.8.3 scheduler sends
 an outbound HTTP `POST` to that URL when the task reaches a terminal state. In that release, the webhook
 path validated only the URL scheme and did not reject loopback, private, link-local, or other non-public
 destinations. Because the v0.8.3 implementation also used the default HTTP client behavior, redirects were
 followed and the destination was not pinned to validated IPs. This allowed blind SSRF from the PinchTab
 server to attacker-chosen HTTP(S) targets reachable from the server. This issue is narrower than a general
 unauthenticated internet-facing SSRF. The scheduler is optional and off by default, and in token-protected
 deployments the attacker must already be able to submit tasks using the server's master API token. In
 PinchTab's intended deployment model, that token represents administrative control rather than a low-
 privilege role. Tokenless deployments lower the barrier further, but that is a separate insecure
 configuration state rather than impact created by the webhook bug itself. PinchTab's default deployment
 model is local-first and user-controlled, with loopback bind and token-based access in the recommended
 setup. That lowers practical risk in default use, even though it does not remove the underlying webhook
 issue when the scheduler is enabled and reachable. This was addressed in v0.8.4 by validating callback
 targets before dispatch, rejecting non-public IP ranges, pinning delivery to validated IPs, disabling
 redirect following, and validating `callbackUrl` during task submission. (CVE-2026-33619)

Solution

Update the github.com/pinchtab/pinchtab library and its related packages to version 0.8.4 or later.

See Also

https://github.com/advisories/GHSA-xqq2-4j46-vwp7

Plugin Details

Severity: Medium

ID: 439172

Version: Revision 1.9

Type: Local

Family: SCA Checks

Published: 3/25/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 2.3

Percentile: 9.42

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 4.7

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:M/C:P/I:P/A:N

CVSS Score Source: CVE-2026-33619

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 5

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/24/2026

Vulnerability Publication Date: 3/24/2026

Reference Information

CVE: CVE-2026-33619

cwe: CWE-918