PT-2026-55837 · Vxcontrol · Pentagi

Ez-Lbz · Published 2026-07-06 · Updated 2026-07-06 · CVE-2026-14784

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions vxcontrol PentAGI versions prior to 2.1.0

Description A remote attack can lead to a sandbox issue within the Docker API component. The issue resides in the backend/pkg/docker/client.go file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

CWE-265

Related Identifiers

CVE-2026-14784

Affected Products

Pentagi

References · 9

• https://github.com/vxcontrol/pentagi/pull/355 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-14784 · Security Note
• https://github.com/vxcontrol/pentagi/issues/337 · Note
• https://vuldb.com/vuln/376374 · Note
• https://twitter.com/CVEnew/status/2073941539655438729 · Twitter Post
• https://github.com/vxcontrol/pentagi · Note
• https://vuldb.com/cve/CVE-2026-14784 · Note
• https://vuldb.com/vuln/376374/cti · Note
• https://vuldb.com/submit/849298 · Note