CVE-2026-85704: A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This i
lowvulnerabilityLLM-Specific
security
Summary
A security flaw (CVE-2026-85704) was found in the freegpt-webui project's Jailbreak Mode feature, affecting a function called getJailbreak in the server/config.py file. The flaw creates a race condition (a bug where the timing of operations causes unexpected behavior), which can be exploited remotely, though it requires significant technical skill to carry out. The vulnerability affects an older version of the product that is no longer maintained.
Vulnerability Details
CVSS Score
3.7(low)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
network
Attack Complexity
high
Privileges Required
none
User Interaction
none
Disclosure Date
September 4, 2026
Classification
Attack Type
Other
Attack SophisticationAdvanced
Impact (CIA+S)
integrity
AI Component TargetedAPI
Affected Vendors
Related Issues
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-85704
First tracked: September 4, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 75%