# CVE-2026-85701: FreeGPT WebUI authentication bypass in ChatCompletion

Source: https://junglewise.ai/threats/cve-2026-85701-freegpt-webui-authentication-bypass-in-chatcompletion  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-04. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85701 · Severity: medium · CVSS 5.3 · Published 2026-09-04

FreeGPT WebUI is a web interface that provides access to AI chat completion services. A vulnerability in the authentication mechanism allows attackers to bypass required authentication checks and access protected AI providers (such as Bard) without credentials by simply omitting a provider argument in their requests.

Technologies: [Ramon-Victor Freegpt-Webui](https://junglewise.ai/threats/technologies/freegpt-webui). Vendors: [Ramon-Victor](https://junglewise.ai/threats/vendors/ramon-victor).

## Quick answers

**Is CVE-2026-85701 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85701 being exploited in the wild.

**How severe is CVE-2026-85701?** Medium severity, with a CVSS score of 5.3, published 4 September 2026.

**Which products and versions are affected?** Ramon-Victor Freegpt-Webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.

**Is there a fix for CVE-2026-85701?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-85701 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-85701?** Check whether you run Ramon-Victor Freegpt-Webui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This is a missing authentication vulnerability (CWE-306) in the ChatCompletion.create method of g4f/__init__.py. The vulnerability occurs because the authentication check (`if provider and provider.needs_auth and not auth`) only validates credentials when a provider is explicitly specified. When no provider argument is passed, the code resolves the provider from `model.best_provider` but skips the authentication check entirely, allowing any model whose best_provider requires authentication (e.g., Model.palm → Provider.Bard with needs_auth=True) to be invoked without credentials. The backend API endpoint in server/backend.py never passes explicit provider or auth arguments, making all auth-required providers accessible unauthenticated through the web API. Attack is network-accessible and requires no prior authentication from the attacker.

## Affected products

- ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc

## Timeline

- 2026-07-18: disclosed: Advisory published on GitHub Gist
- 2026-09-04: advisory: CVE-2026-85701 published
- 2026-09-04: other: Product noted as archived and no longer supported by maintainer

## References

- [https://gist.github.com/Galaxync/4e91898128de8fffbaf893fb1f9d4272](https://gist.github.com/Galaxync/4e91898128de8fffbaf893fb1f9d4272)
- [https://vuldb.com/cve/CVE-2026-85701](https://vuldb.com/cve/CVE-2026-85701)

## Related threats

- [ramon-victor freegpt-webui race condition in jailbreak mode](https://junglewise.ai/threats/cve-2026-85704-ramon-victor-freegpt-webui-race-condition-in-jailbreak-mode)
- [ramon-victor freegpt-webui global state mutation in Jailbreak Mode](https://junglewise.ai/threats/cve-2026-85703-ramon-victor-freegpt-webui-global-state-mutation-in-jailbreak)
- [ramon-victor freegpt-webui authentication bypass in backend conversation API](https://junglewise.ai/threats/cve-2026-85702-ramon-victor-freegpt-webui-authentication-bypass-in-backend)