PatchTheCVEpinchtab vulnerabilities and fixes
Recent CVEs affecting pinchtab, with upgrade or downgrade steps. 6 tracked.
pinchtab has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-03-26. Highest priority: CVE-2026-33623 (score 50/100).
- CVE-2026-33623 MEDIUM 6.7 UPGRADE PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser
- CVE-2026-33622 HIGH 8.8 UPGRADE PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser
- CVE-2026-33621 MEDIUM 4.8 UPGRADE PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser
- CVE-2026-33620 MEDIUM 4.3 UPGRADE PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser
- CVE-2026-33619 MEDIUM 4.1 UPGRADE PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser
- CVE-2026-33081 MEDIUM 5.8 UPGRADE PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser
FAQ
How do I fix pinchtab vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pinchtab being exploited right now?
None of the tracked pinchtab CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pinchtab CVE should I patch first?
CVE-2026-33623 currently ranks highest (50/100): PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.