CVE-2026-85703: Allocation of Resources in ramon-victor freegpt-webui
Description
A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backend.py of the component Jailbreak Mode. Executing a manipulation can lead to allocation of resources. The attack can be executed remotely. The exploit has been published and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS v4.0
Score 6.9medium
Affected software
ramon-victor
freegpt-webui
cpe:2.3:a:ramon-victor:freegpt-webui:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in the getJailbreak function of the Jailbreak Mode component in ramon-victor freegpt-webui up to commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. An attacker can remotely execute a manipulation that causes allocation of resources, potentially impacting system stability or availability. The product's rolling release model prevents precise version identification for affected or fixed releases. The vulnerability affects only unsupported versions of the product. Exploit code has been published, indicating potential for exploitation, though no active exploitation is currently known.
Potential Impact
Remote attackers can cause resource allocation on affected systems, which may lead to resource exhaustion or denial of service conditions. The impact is rated medium severity with a CVSS 4.0 score of 6.9. There is no indication of privilege escalation or data compromise from the provided data.
Mitigation Recommendations
No official patch or remediation is available because the vulnerability affects only unsupported versions of the product. Users should upgrade to supported versions or discontinue use of unsupported versions. Since no vendor advisory or patch information is provided, check the vendor's official channels for any updates or guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-09-04T14:15:00.545Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9b2f9cacd9273b493d4334
Added to database: 09/04/2026, 20:52:44 UTC
Last enriched: 09/14/2026, 23:39:55 UTC
Last updated: 10/17/2026, 18:48:23 UTC
Views: 69
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.