Description

A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. Affected by this issue is the function getJailbreak of the file server/backend.py of the component Jailbreak Mode. Executing a manipulation can lead to allocation of resources. The attack can be executed remotely. The exploit has been published and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This vulnerability only affects products that are no longer supported by the maintainer.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "6.5",
  "pubDate": "2026-09-04T21:17:26.667Z",
  "pubdate": "2026-09-04T21:17:26.667Z",
  "executiveSummary": "A resource exhaustion vulnerability exists within the Jailbreak Mode component of ramon-victor freegpt-webui, specifically impacting the getJailbreak function in server/backend.py.\nThis flaw allows a remote, unauthenticated attacker to induce an uncontrolled allocation of system resources, potentially leading to a Denial of Service (DoS) state.\nThe vulnerability affects all versions of the product up to commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc.\nAs the software utilizes a rolling release model and the project is no longer maintained, no official vendor-supplied security patches are available, leaving the affected codebase persistently vulnerable.\nThe impact is significant, as the remote nature of the exploit lowers the barrier for adversaries to cause service unavailability without requiring local access or pre-existing credentials.",
  "technicalDetails": "The vulnerability resides in the getJailbreak function within server/backend.py, which is responsible for handling requests related to the application's Jailbreak Mode. Analysis indicates that the function lacks sufficient validation or rate-limiting mechanisms when processing incoming requests, allowing for the manipulation of input parameters that drive resource allocation.\nThe root cause of the flaw is an improper management of memory or processing cycles during the execution of the getJailbreak logic. By sending specifically crafted requests to the backend, an attacker can force the application to repeatedly allocate resources without appropriate reclamation or termination conditions. This behavior suggests a failure to constrain the upper bounds of resource consumption during the execution of jailbreak-related operations.\nThe attack flow involves a remote actor sending malicious payloads to the backend API endpoint mapped to server/backend.py. Upon receiving the payload, the getJailbreak function initiates a process or memory allocation routine that is disproportionate to the legitimate operational needs of the component. Because the process is exposed over the network and lacks authorization requirements, an attacker can initiate multiple concurrent requests to amplify the exhaustion effect.\nThe technical impact manifests as excessive CPU and memory consumption. In a production environment, this leads to resource starvation, which causes the application container or host system to become unresponsive to legitimate user traffic, effectively inducing a Denial of Service (DoS). The vulnerability is exacerbated by the fact that the project is no longer supported, meaning that automated systems or environments currently hosting this version of freegpt-webui will remain exposed to this vector unless manual configuration changes are implemented to wrap the backend with defensive layers.\nAs the exploit code is publicly available, the risk of automated or targeted exploitation is elevated. Attackers do not require elevated privileges to execute the manipulation, as the exposed function in server/backend.py is likely accessible to any client capable of reaching the backend service. Once the memory or CPU thresholds are reached, the application's ability to maintain existing state or process new connections is severely degraded or halted entirely, requiring an external restart of the service to recover."
}