CVE-2026-14784
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A vulnerability was found in vxcontrol PentAGI up to version 2.1.0 in the file backend/pkg/docker/client.go of the Docker API component. Manipulation leads to a sandbox issue. The attack can be initiated remotely.
Risk Assessment
The organization is at risk of remote sandbox escape, potentially allowing unauthorized access to resources or privilege escalation.
Recommendation
Apply the fix from the pending pull request immediately or upgrade to a version above 2.1.0 once released. Restrict access to the Docker API until patched.
Original NVD description (English source)
A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipulation leads to sandbox issue. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.