CVE-2026-85704: Race Condition in ramon-victor freegpt-webui
Description
A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak of the file server/config.py of the component Jailbreak Mode. The manipulation results in race condition. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitability is assessed as difficult. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS v4.0
Score 6.3medium
Affected software
ramon-victor
freegpt-webui
cpe:2.3:a:ramon-victor:freegpt-webui:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-85704 is a race condition vulnerability in the getJailbreak function of the Jailbreak Mode component within the server/config.py file of ramon-victor freegpt-webui. The issue allows remote attackers to manipulate the function, potentially leading to unintended behavior due to concurrent access. The exploit requires no privileges or user interaction but has a high complexity and is difficult to execute. The product's rolling release model means no discrete version numbers are provided for affected or fixed releases. The vulnerability affects only unsupported versions of the software. Public exploit code is available.
Potential Impact
The vulnerability allows remote attackers to exploit a race condition in the getJailbreak function, potentially leading to unauthorized manipulation of the Jailbreak Mode component. The exploitability is difficult, requiring high complexity, and no privileges or user interaction are needed. The availability of public exploit code increases the risk of attacks. However, only unsupported versions are affected, limiting exposure to users running maintained versions.
Mitigation Recommendations
Since the vulnerability affects only unsupported versions of the product, users should upgrade to supported versions or switch to maintained forks or alternatives. No official patch or fixed version details are available due to the rolling release model and lack of maintainer support. Users should verify with the vendor or project repository for any updates or mitigations. Patch status is not yet confirmed—check the vendor advisory or project repository for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-09-04T14:15:04.049Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9b331cacd9273b494177ed
Added to database: 09/04/2026, 21:07:40 UTC
Last enriched: 09/14/2026, 23:54:25 UTC
Last updated: 10/17/2026, 18:48:23 UTC
Views: 74
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.