CVE-2026-14784

vxcontrol PentAGI Docker API client.go sandbox

MEDIUM
6.3
CVSS Score
Published: July 6, 2026 at 12:00 AM UTC
Updated: October 25, 2026 at 03:10 PM UTC
1 product affected across 1 vendorPentAGI

Using PentAGI by vxcontrol?

Get instant alerts when new vulnerabilities affect PentAGI - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.3
Exploit prediction
EPSS 0.4%
SSVC
No known exploit

Description

A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipulation leads to sandbox issue. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

References (7)

VDB Entry
Source: cverecord
https://vuldb.com/vuln/376374
SignaturePermissions Required
Source: cverecord
https://vuldb.com/vuln/376374/cti
Third Party Advisory
Source: cverecord
https://vuldb.com/cve/CVE-2026-14784
Third Party Advisory
Source: cverecord
https://vuldb.com/submit/849298
Issue TrackingPatch
Source: cverecord
https://github.com/vxcontrol/pentagi/pull/355

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.3MEDIUMVulDB
Vector?

Quick Info

StatusDEFERRED
CWE
CWE-265CWE-264

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card