Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Prior to version 0.7.7, a Server-Side Request Forgery (SSRF) vulnerability in the /download endpoint allows any user with API access to induce the PinchTab server to make requests to arbitrary URLs, including internal network services and local system files, and exfiltrate the full response content. This issue has been patched in version 0.7.7.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-06 | 1 | Disclosure1 |
| 2026-03-07 | 2 | Disclosure1Patch1 |
| 2026-03-12 | 2 | Disclosure1General1 |
CVE-2026-30834 Server-Side Request Forgery in PinchTab HTTP Server Allows Arbitrary URL Requests https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30834
Post summary
CVE-2026-30834 is a newly disclosed Server‑Side Request Forgery vulnerability in the PinchTab HTTP Server that permits arbitrary URL requests.
CVE-2026-30834 (CVSS:7.5, HIGH) is Analyzed. PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Prior to version 0.7.7, ..https://nvd.nist.gov/vuln/detail/CVE-2026-30834 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces analysis of CVE-2026-30834, noting a high CVSS score and describing how PinchTab allows AI agents direct Chrome control, but it provides no PoC, exploit, patch, or evidence of active exploitation.
🔴 https://dailycve.com/pinchtab-server-side-request-forgery-ssrf-#cve-2026-30834-high-2/ Adobe Substance 3D Stager, Out-of-bounds Write, CVE-2026-27274 (High)
Post summary
The post cites two high‑severity CVEs (SSRF and OOB write) but provides only minimal technical details, with no evidence of PoC, exploitation, or mitigations.
CVE-2026-30834 PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Prior to version 0.7.7, a Server-Side Request Forgery (SSRF) vulnerabi… https://www.cve.org/CVERecord?id=CVE-2026-30834
Post summary
CVE-2026-30834 identifies an SSRF flaw in PinchTab before version 0.7.7, with a version-based patch implied and no PoC or exploit disclosed.
🔴 PinchTab, Server-Side Request Forgery (SSRF), #CVE-2026-30834 (High) https://dailycve.com/pinchtab-server-side-request-forgery-ssrf-cve-2026-30834-high/
Post summary
A new SSRF vulnerability, CVE-2026-30834, has been disclosed for PinchTab and is classified as high risk, with no PoC or exploit details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pinchtab | pinchtab | - | - | - |