CVE-2026-18593
Received Received - Intake

Sandbox Escape in vxcontrol PentAGI

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: VulDB

Description
A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotely. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-18593
EUVD
EUVD-2026-52222

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
vxcontrol pentagi to 2.1.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-265
CWE-264 Permissions, Privileges, and Access Controls

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

A weakness exists in vxcontrol PentAGI up to version 2.1.0, specifically in the file backend/pkg/templates/prompts/pentester.tmpl. This flaw is related to the Tool Management Protocol Handler component and can lead to a sandbox issue when manipulated. The attack can be executed remotely and requires high complexity, making exploitability difficult.

Detection Guidance

Detection may involve inspecting the file backend/pkg/templates/prompts/pentester.tmpl in vxcontrol PentAGI installations up to 2.1.0 for unauthorized modifications or suspicious content. No specific commands are provided in the context.

Impact Analysis

This vulnerability could allow remote attackers to bypass sandbox restrictions, potentially leading to unauthorized access or execution of malicious code. The public availability of an exploit increases the risk of attacks, though the high complexity may limit widespread exploitation.

Compliance Impact

The vulnerability involves a sandbox issue in vxcontrol PentAGI that could allow remote attacks with high complexity. This may lead to unauthorized access or data exfiltration, which could violate GDPR (data protection) and HIPAA (health data security) if sensitive data is compromised. However, specific compliance impacts depend on system configuration and data handling.

Mitigation Strategies

Immediately update vxcontrol PentAGI to the latest version beyond 2.1.0 if available. If no update exists, consider isolating or discontinuing use of the affected component. Monitor vendor communications for patches or workarounds.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18593. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart