# CVE-2026-85702: ramon-victor freegpt-webui authentication bypass in backend conversation API

Source: https://junglewise.ai/threats/cve-2026-85702-ramon-victor-freegpt-webui-authentication-bypass-in-backend  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-04. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85702 · Severity: high · CVSS 7.3 · Published 2026-09-04

freegpt-webui is a web interface that provides access to AI language models through a backend API service. The backend conversation endpoint does not perform authentication checks, allowing unauthenticated users to call the API, consume expensive upstream AI resources (like GPT-4), and bypass content safety filters. This degrades service for legitimate users and exposes the upstream AI providers to resource exhaustion attacks.

Technologies: [Ramon-Victor Freegpt-Webui](https://junglewise.ai/threats/technologies/freegpt-webui). Vendors: [Ramon-Victor](https://junglewise.ai/threats/vendors/ramon-victor).

## Quick answers

**Is CVE-2026-85702 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85702 being exploited in the wild.

**How severe is CVE-2026-85702?** High severity, with a CVSS score of 7.3, published 4 September 2026.

**Which products and versions are affected?** Ramon-Victor Freegpt-Webui up to commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.

**Is there a fix for CVE-2026-85702?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-85702 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-85702?** Check whether you run Ramon-Victor Freegpt-Webui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a missing authentication (CWE-306) in the /backend-api/v2/conversation endpoint of the Backend Conversation API component in server/backend.py. The vulnerable _conversation function accepts a 'model' parameter without validating it against the server's configured whitelist in server/config.py, and performs no login, API key, session, or rate-limiting checks. An unauthenticated attacker can remotely send POST requests with arbitrary model names and jailbreak parameters to exhaust rate limits on upstream free AI providers and trigger content safety bypass. The product operates on a rolling release basis with no versioning, affects only unsupported instances, and is now archived.

## Affected products

- ramon-victor freegpt-webui up to commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc

## Timeline

- 2026-07-18: disclosed: Advisory published on GitHub Gist
- 2026-09-04: advisory: CVE-2026-85702 published on NVD

## References

- [https://gist.github.com/Galaxync/15cb5d1bf6ab110f0cba91664ed511dd](https://gist.github.com/Galaxync/15cb5d1bf6ab110f0cba91664ed511dd)
- [https://vuldb.com/cve/CVE-2026-85702](https://vuldb.com/cve/CVE-2026-85702)

## Related threats

- [ramon-victor freegpt-webui race condition in jailbreak mode](https://junglewise.ai/threats/cve-2026-85704-ramon-victor-freegpt-webui-race-condition-in-jailbreak-mode)
- [ramon-victor freegpt-webui global state mutation in Jailbreak Mode](https://junglewise.ai/threats/cve-2026-85703-ramon-victor-freegpt-webui-global-state-mutation-in-jailbreak)
- [FreeGPT WebUI authentication bypass in ChatCompletion](https://junglewise.ai/threats/cve-2026-85701-freegpt-webui-authentication-bypass-in-chatcompletion)