This vulnerability affects vxcontrol PentAGI up to version 2.1.0 and is located in an unspecified part of the file backend/pkg/templates/prompts/pentester.tmpl within the Tool Management Protocol Handler component. The issue is a sandbox escape or bypass weakness that could allow an attacker to execute actions outside the intended sandbox environment. Exploitation requires no privileges or user interaction but has high attack complexity and low impact on confidentiality, integrity, and availability. The vendor has not issued any fix or advisory, and no patch information is available. Public exploit code exists, increasing the risk despite the difficulty of exploitation.

Successful exploitation could allow an attacker to bypass sandbox restrictions remotely, potentially leading to unauthorized actions outside the sandbox. However, the impact on confidentiality, integrity, and availability is rated low. The attack complexity is high, making exploitation difficult. No known exploits in the wild have been reported, but public exploit code is available.

No official fix or patch is currently available from the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the lack of vendor response, users should consider risk mitigation strategies such as restricting network access to the affected service and monitoring for unusual activity related to the Tool Management Protocol Handler component. Avoid exposure of affected versions (2.0 and 2.1.0) to untrusted networks where possible.