CVE-2026-85704: ramon-victor freegpt-webui Jailbreak Mode config.py getJailbreak race condition
A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak of the file server/config.py of the component Jailbreak Mode. The manipulation results in race condition. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitability is assessed as difficult. The exploit has been released to the public and may be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require an authenticated account or user interaction?
No privileges or user interaction are required according to the supplied vector. The attack can be launched remotely, but it has high complexity and is assessed as difficult to exploit.
Which deployments should be prioritized for investigation?
The issue applies to ramon-victor/freegpt-webui affected through commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc, and the supplied data states that only products no longer supported by the maintainer are affected.
Is a public exploit available?
Yes. The supplied information states that an exploit has been released publicly and may be used in attacks.
Is there a specific fixed release to upgrade to?
No fixed or updated version is provided. The product uses rolling releases, and version details for affected and updated releases are not available.