CVE-2026-14784: vxcontrol PentAGI Docker API client.go sandbox

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-06 · updated 2026-10-25
Weakness: CWE-264

Description

A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipulation leads to sandbox issue. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Affected products

vxcontrol PentAGI: 2.0, 2.1.0

References

https://github.com/vxcontrol/pentagi/
https://github.com/vxcontrol/pentagi/issues/337
https://github.com/vxcontrol/pentagi/pull/355
https://vuldb.com/cve/CVE-2026-14784
https://vuldb.com/submit/849298
https://vuldb.com/vuln/376374
https://vuldb.com/vuln/376374/cti

Get alerted when CVE-2026-14784 or the next vulnerability affects your stack