---
id: CVE-2026-122020
title: >-
  NST Labs Tech Nstbrowser Local Agent Management Service stopAll
  stopAllBrowsers denial of service
summary: >-
  A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1.
  The affected element is the function stopAllBrowsers of the file
  /api/agent/browser/stopAll of the component Local Agent Management Service.
  Performing a manipu…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-404
vendor: NST Labs Tech
product: Nstbrowser
affected:
  - Nstbrowser 1.2.0
  - Nstbrowser 1.2.1
published: '2026-11-04'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T09:07:33.450Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-122020'
references:
  - url: 'https://vuldb.com/vuln/431086'
    label: >-
      VDB-431086 | NST Labs Tech Nstbrowser Local Agent Management Service
      stopAll stopAllBrowsers denial of service
  - url: 'https://vuldb.com/vuln/431086/cti'
    label: 'VDB-431086 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-122020'
    label: CVE-2026-122020 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1024994'
    label: 'Submit #1024994 | https://www.nstbrowser.io/en nstbroswer 1.2.1 DDOS'
  - url: >-
      https://drive.google.com/drive/folders/1TzU1aHKabEHbMmSbqVR4HhxTAxKO6XII?usp=drive_link
  - url: 'https://drive.google.com/drive/folders/1TzU1aHKabEHbMmSbqVR4HhxTAxKO6XII'
tags:
  - cve.org
epss: 0.00319
epssPercentile: 0.25044
ingestedAt: '2026-11-05T21:36:00.630Z'
---

## Overview

A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. The affected element is the function stopAllBrowsers of the file /api/agent/browser/stopAll of the component Local Agent Management Service. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `Nstbrowser 1.2.0`
- `Nstbrowser 1.2.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.