---
id: CVE-2026-122028
title: NST Labs Tech Nstbrowser Local Agent API info information disclosure
summary: >-
  A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by
  this vulnerability is an unknown functionality of the file /agent/info of the
  component Local Agent API. Such manipulation leads to information disclosure.
  It…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-200
  - CWE-284
vendor: NST Labs Tech
product: Nstbrowser
affected:
  - Nstbrowser 1.21.0
published: '2026-11-04'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T22:15:18.816Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-122028'
references:
  - url: 'https://vuldb.com/vuln/431091'
    label: >-
      VDB-431091 | NST Labs Tech Nstbrowser Local Agent API info information
      disclosure
  - url: 'https://vuldb.com/vuln/431091/cti'
    label: 'VDB-431091 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-122028'
    label: CVE-2026-122028 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1025065'
    label: "Submit #1025065 | https://www.nstbrowser.io/en \tnstbroswer  1.21.0 sensitive logic exposure leading to fingerprint broswer track"
  - url: >-
      https://drive.google.com/drive/folders/135l_IZU955OmUNC5so83IiixlPPJp5X1?usp=drive_link
  - url: 'https://drive.google.com/drive/folders/135l_IZU955OmUNC5so83IiixlPPJp5X1'
tags:
  - cve.org
ingestedAt: '2026-11-05T21:36:00.638Z'
epss: 0.0038
epssPercentile: 0.32202
---

## Overview

A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerability is an unknown functionality of the file /agent/info of the component Local Agent API. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `Nstbrowser 1.21.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.