CVE-2026-85701

ramon-victor freegpt-webui Authentication Check __init__.py ChatCompletion.create missing authentication

View on CVE.org
Published Sep 4, 2026 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Description
A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/__init__.py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. This vulnerability only affects products that are no longer supported by the maintainer.

Analysis

AI-generated

Technical impact

The flaw resides in the ChatCompletion.create function of freegpt-webui where an authentication check is omitted, enabling an attacker to invoke the endpoint without credentials. The missing check can allow any user with network reachability to interact with the model, potentially exposing sensitive prompts or extracting data via the API. This represents an authentication failure that could result in unauthorized data access or service misuse.

Affected Systems

The vulnerability affects the ramon-victor freegpt-webui product. Any deployment using a release up to the commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc is impacted. Newer releases after this commit are presumed fixed, though the project uses a rolling release model without explicit version tags.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity. Even though no EPSS score is reported, the vulnerability is publicly disclosed and can be exploited remotely. It is not currently listed in the CISA KEV catalog, but the fact that any authenticated or unauthenticated request can bypass safety checks suggests that attackers could leverage it until a patch is applied.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the application to a commit after 098db3dfeb41555c2ca9269df0f13e10ec1c35dc to incorporate the missing authentication logic.
  • Restrict network exposure of the ChatCompletion API by placing it behind an authenticated gateway or firewall until the patch is applied.
  • Add an additional API key or token validation layer as a temporary workaround before the official fix is available.

Generated by OpenCVE AI on September 4, 2026 at 21:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/__init__.py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. This vulnerability only affects products that are no longer supported by the maintainer.
Title ramon-victor freegpt-webui Authentication Check __init__.py ChatCompletion.create missing authentication
First Time appeared Ramon-victor
Ramon-victor freegpt-webui
Weaknesses CWE-287
CWE-306
CPEs cpe:2.3:a:ramon-victor:freegpt-webui:*:*:*:*:*:*:*:*
Vendors & Products Ramon-victor
Ramon-victor freegpt-webui
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-287

    Improper Authentication

  • CWE-306

    Missing Authentication for Critical Function

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Sep 8, 2026, 5:53 PM
Reserved
Sep 4, 2026, 2:07 PM

View source JSON

Updated
Sep 8, 2026, 5:53 PM

JSON

Status
Deferred
Published
Sep 4, 2026, 9:17 PM
Modified
Sep 8, 2026, 6:21 PM

View source JSON

No data.

Updated
Sep 5, 2026, 2:30 AM

JSON