CVE-2026-129130

A remote device-control session could read files from the daemon host

Callstack · agent-device remote browser control

First documented disclosure · Review checkpoint

Summary

Browser navigation accepted local file URLs in a remote session. Text files readable by the daemon account could be returned in a browser snapshot.

Severity and exploitation evidence

High · 7.1/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed advisory does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Browser navigation accepted local file URLs in a remote session.

Conditions required

An authenticated remote caller controlled a browser through the affected daemon.

Potential impact

Text files readable by the daemon account could be returned in a browser snapshot.

Affected versions and configurations

0.21.36 before 0.21.37.

Fix and mitigation status

0.21.37.

Practical next steps

Upgrade agent-device to 0.21.37 or later and restrict the host files accessible to the daemon account.

Operating lesson

Separate remote browser navigation from access to the daemon host’s filesystem.

Evidence and limits

The advisory and CVE record were published on 2026-11-13.

Sources