CVE-2026-14784

MEDIUM 6.3

vxcontrol PentAGI Docker API client.go sandbox

CVSS Score

6.3

EPSS Score

0.2%

EPSS Percentile

14th

A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipulation leads to sandbox issue. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

CWE	CWE-265 CWE-264
Vendor	vxcontrol
Product	pentagi
Published	Jul 6, 2026
Last Updated	Jul 6, 2026

Stay Ahead of the Next One

Get instant alerts for vxcontrol pentagi

Be the first to know when new medium vulnerabilities affecting vxcontrol pentagi are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

vxcontrol / PentAGI

2.0 2.1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/376374 vuldb.com: https://vuldb.com/vuln/376374/cti vuldb.com: https://vuldb.com/cve/CVE-2026-14784 vuldb.com: https://vuldb.com/submit/849298 github.com: https://github.com/vxcontrol/pentagi/issues/337 github.com: https://github.com/vxcontrol/pentagi/pull/355 github.com: https://github.com/vxcontrol/pentagi/

Credits

🔍 ez-lbz (VulDB User) VulDB CNA Team