# CVE-2026-85703: ramon-victor freegpt-webui global state mutation in Jailbreak Mode

Source: https://junglewise.ai/threats/cve-2026-85703-ramon-victor-freegpt-webui-global-state-mutation-in-jailbreak  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-04. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85703 · Severity: medium · CVSS 6.5 · Published 2026-09-04

freegpt-webui is a web interface for accessing GPT models. A flaw in its Jailbreak Mode component allows remote attackers to repeatedly send requests that permanently degrade the application's performance and consume upstream API tokens by causing unbounded memory growth that affects all users. This can lead to service unavailability and increased operational costs.

Technologies: [Ramon-Victor Freegpt-Webui](https://junglewise.ai/threats/technologies/freegpt-webui). Vendors: [Ramon-Victor](https://junglewise.ai/threats/vendors/ramon-victor).

## Quick answers

**Is CVE-2026-85703 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85703 being exploited in the wild.

**How severe is CVE-2026-85703?** Medium severity, with a CVSS score of 6.5, published 4 September 2026.

**Which products and versions are affected?** Ramon-Victor Freegpt-Webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.

**Is there a fix for CVE-2026-85703?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-85703 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-85703?** Check whether you run Ramon-Victor Freegpt-Webui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a global state mutation flaw (CWE-284) in the getJailbreak function of server/backend.py. The function repeatedly appends instruction text to a module-level shared dictionary on each request with a non-default jailbreak mode, causing the instructions to grow exponentially across all requests and users. Additionally, the function performs an unsafe membership check after dictionary access, allowing any invalid jailbreak value to raise an unhandled KeyError. An unauthenticated attacker can remotely exploit this by sending repeated POST requests with invalid or valid jailbreak parameters, causing the prompt to grow by ~500 characters per request and eventually exceed model context windows, degrading service for all users and wasting API tokens.

## Affected products

- ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc

## Timeline

- 2026-09-04: disclosed
- other: Product is archived and no longer maintained

## References

- [https://gist.github.com/Galaxync/04d5b16498911c405580c735148a53be](https://gist.github.com/Galaxync/04d5b16498911c405580c735148a53be)
- [https://vuldb.com/cve/CVE-2026-85703](https://vuldb.com/cve/CVE-2026-85703)

## Related threats

- [ramon-victor freegpt-webui race condition in jailbreak mode](https://junglewise.ai/threats/cve-2026-85704-ramon-victor-freegpt-webui-race-condition-in-jailbreak-mode)
- [ramon-victor freegpt-webui authentication bypass in backend conversation API](https://junglewise.ai/threats/cve-2026-85702-ramon-victor-freegpt-webui-authentication-bypass-in-backend)
- [FreeGPT WebUI authentication bypass in ChatCompletion](https://junglewise.ai/threats/cve-2026-85701-freegpt-webui-authentication-bypass-in-chatcompletion)