CVE-2026-122028— NST Labs Tech Nstbrowser Local Agent API info information disclosure

Quick assessment

Affected

NST Labs Tech Nstbrowser

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 NST Labs Tech 的 Nstbrowser 1.21.0 中发现了一个安全漏洞。该漏洞影响本地代理 API（Local Agent API）组件中文件的某个未知功能。攻击者可利用该漏洞进行信息泄露。此攻击可远程发起。相关利用方式已向公众公开，可能被利用。厂商已在此漏洞披露早期被联系，但至今未作出任何回应。

CVSS 4.3 · Medium Updated Nov 05, 2026

Possible ATT&CK Techniques 2 AI

T1190 · Exploit Public-Facing Application T1040 · Network Sniffing

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

NST Labs Tech Nstbrowser Local Agent API info information disclosure

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. Affected by this vulnerability is an unknown functionality of the file /agent/info of the component Local Agent API. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Source: CVE Program / CVE List V5