CVE-2026-85701
CVE-2026-85701
A vulnerability has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function ChatCompletion.create of the file g4f/__init__.py of the component Authentication Check. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. This vulnerability only affects products that are no longer supported by the maintainer.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.
EPSS exploit prediction
EPSS: 0.006 (49.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 49th percentile — 49.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.006 · change: +0.002
Weakness classification (CWE)
References
- gist.github.com/Galaxync/4e91898128de8fffbaf893fb1f9d4272 (exploit)
- vuldb.com/cve/CVE-2026-85701 (third-party-advisory)
- vuldb.com/submit/895266 (third-party-advisory)
- vuldb.com/vuln/398799 (technical-description, vdb-entry)
- vuldb.com/vuln/398799/cti (signature, permissions-required)
Frequently asked questions
- What is CVE-2026-85701?
- CVE-2026-85701 is a medium-severity vulnerability, classified under Improper Authentication. CVSS score: 5.3/10. Published 2026-09-04.
- How severe is CVE-2026-85701?
- Medium severity. CVSS v3 base score is 5.3 out of 10.