This vulnerability affects vxcontrol PentAGI up to version 2.1.0, impacting an unspecified function within the Docker API client code (backend/pkg/docker/client.go). The issue results in a sandbox security problem, potentially allowing an attacker to bypass sandbox restrictions. The attack vector is remote network access with low attack complexity and no user interaction required. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. Although a pull request to fix the issue exists, it has not yet been merged or officially released, and no vendor advisory or patch is currently available.

The vulnerability could allow remote attackers to manipulate the Docker API client component in a way that compromises sandbox isolation, potentially leading to unauthorized access or actions outside the intended sandbox environment. The impact is limited by the medium severity score and the requirement for low privileges but no user interaction. No known exploits are reported in the wild at this time.

No official fix or patch is currently available as the pull request to address this vulnerability is pending acceptance. Users should monitor the vendor's repository or advisory channels for updates regarding the acceptance and release of the fix. Until then, consider restricting remote access to the affected component and applying any available access controls to limit exposure.