Vulnerability · Published Sep 4, 2026 · Assigned by VulDB
CVE-2026-85703ramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources
Medium 6.5
In plain English
A medium-severity resource allocation without limits in freegpt-webui from ramon-victor. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).
Official description
A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backend.py of the component Jailbreak Mode. Executing a manipulation can lead to allocation of resources. The attack can be executed remotely. The exploit has been published and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ramon-victor | freegpt-webui | 098db3dfeb41555c2ca9269df0f13e10ec1c35dc |
Weakness: CWE-770, CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-398807 | ramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources vdb-entry, technical-description
- VDB-398807 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-85703 | CVE Analysis and Report third-party-advisory
- Submit #895268 | ramon-victor (https://github.com/ramon-victor) freegpt-webui latest (main/master branch) CWE-284 (Improper Access Control / Broken Access Control - autho third-party-advisory
- https://gist.github.com/Galaxync/04d5b16498911c405580c735148a53be exploit