Description
A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipulation leads to sandbox issue. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.
Published: 2026-07-06
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability resides in an undocumented function within backend/pkg/docker/client.go of PentAGI. By manipulating a Docker API call, an attacker can bypass the sandbox that encloses the container, potentially allowing execution of code outside the intended environment. This flaw maps to access control weaknesses (CWE‑264) and insufficient privilege separation (CWE‑265).

Affected Systems

PentAGI distributed by vxcontrol up to version 2.1.0 is affected. No post‑2.1.0 releases were mentioned and the vendor has not yet released an official fix; a pull request that addresses the issue is waiting for approval.

Risk and Exploitability

The CVSS score of 5.3 indicates medium severity, while the EPSS score is below 1 %. The flaw is not listed in the CISA KEV catalog. The description states that the exploitation can be triggered remotely by targeting the Docker API service. Because the attacker can potentially escape the container sandbox, the potential impact is high in an environment where Docker containers are granted elevated privileges.

Generated by OpenCVE AI on July 26, 2026 at 21:04 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the vendor‑issued fix as soon as pull request #355 is merged and a new release is published.
  • Restrict Docker API access to trusted users or local‑host connections only, and enforce the principle of least privilege for containers.
  • If the Docker service is not required for your deployment, disable or remove it from the PentAGI configuration to eliminate the exposed surface.
  • As an interim safeguard, run PentAGI with the minimum privileges necessary and isolate its runtime environment from critical host processes.

Generated by OpenCVE AI on July 26, 2026 at 21:04 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 06 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 06 Jul 2026 00:30:00 +0000

Type Values Removed Values Added
Description A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipulation leads to sandbox issue. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.
Title vxcontrol PentAGI Docker API client.go sandbox
First Time appeared Vxcontrol
Vxcontrol pentagi
Weaknesses CWE-264
CWE-265
CPEs cpe:2.3:a:vxcontrol:pentagi:*:*:*:*:*:*:*:*
Vendors & Products Vxcontrol
Vxcontrol pentagi
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X'}

Subscriptions

Vxcontrol Pentagi
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-07-06T13:29:33.137Z

Reserved: 2026-07-05T14:50:20.884Z

Link: CVE-2026-14784

cve-icon Vulnrichment

Updated: 2026-07-06T13:29:27.172Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-26T21:15:03Z

Weaknesses