What’s Vulnerable › Vulnerabilities

CVE-2026-85703: ramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-04 · updated 2026-09-11
• Weakness: CWE-400

Description

A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backend.py of the component Jailbreak Mode. Executing a manipulation can lead to allocation of resources. The attack can be executed remotely. The exploit has been published and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

• ramon-victor freegpt-webui: 098db3dfeb41555c2ca9269df0f13e10ec1c35dc

References

• https://gist.github.com/Galaxync/04d5b16498911c405580c735148a53be
• https://vuldb.com/cve/CVE-2026-85703
• https://vuldb.com/submit/895268
• https://vuldb.com/vuln/398807
• https://vuldb.com/vuln/398807/cti

Get alerted when CVE-2026-85703 or the next vulnerability affects your stack