CVE-2026-18593
MediumCVSS 5.6Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. The attack is possible remotely with high complexity. The exploit has been made public.
Risk Assessment
The risk is potential bypass of sandbox mechanisms, which could lead to unauthorized system access or code execution.
Recommendation
It is recommended to update to a newer version if available and monitor the system for unusual activity.
Other vulnerabilities in vxcontrol PentAGI
Original NVD description (English source)
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotely. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS