CVE-2026-122020

Name of the Vulnerable Software and Affected Versions NST Labs Tech Nstbrowser versions prior to 1.2.2

Description A flaw in the Local Agent Management Service allows remote attackers to cause a denial of service. The issue exists within the stopAllBrowsers() function located in the '/api/agent/browser/stopAll' endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/api/agent/browser/stopAll' endpoint or disable the stopAllBrowsers() function.