A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/__init__.py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Exploitation poc

Automatable yes

Technical Impact partial

Affected Vendors & Products

Vendors Products
Ramon-victor
  • Freegpt-webui

No data.

No data.

References
Link Providers
https://gist.github.com/Galaxync/4e91898128de8fffbaf893fb1f9d4272 cve-icon cve-icon
https://vuldb.com/cve/CVE-2026-85701 cve-icon cve-icon
https://vuldb.com/submit/895266 cve-icon cve-icon
https://vuldb.com/vuln/398799 cve-icon cve-icon
https://vuldb.com/vuln/398799/cti cve-icon cve-icon
History

Tue, 08 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 04 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/__init__.py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. This vulnerability only affects products that are no longer supported by the maintainer.
Title ramon-victor freegpt-webui Authentication Check __init__.py ChatCompletion.create missing authentication
First Time appeared Ramon-victor
Ramon-victor freegpt-webui
Weaknesses CWE-287
CWE-306
CPEs cpe:2.3:a:ramon-victor:freegpt-webui:*:*:*:*:*:*:*:*
Vendors & Products Ramon-victor
Ramon-victor freegpt-webui
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P'}
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-09-04T20:15:07.197Z

Updated: 2026-09-08T17:53:52.969Z

Reserved: 2026-09-04T14:07:11.993Z

Link: CVE-2026-85701

cve-icon Vulnrichment

Updated: 2026-09-08T17:53:46.714Z

cve-icon NVD

Status : Deferred

Published: 2026-09-04T21:17:26.260

Modified: 2026-09-08T18:21:13.657

Link: CVE-2026-85701

cve-icon Redhat

No data.