Executive brief
Free5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API in github.com/free5gc/openapi
Affected products
- Go github.com/free5gc/udm
- Go github.com/free5gc/openapi
Junglewise Threat Intelligence
CVE-2025-60633: GO-2025-4162 - Free5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API in github.com/free5gc/openapi
CVE-2025-60633 · Severity: low · CVSS 3.1 · Published 2025-12-15
Technologies: github.com/free5gc/udm (Go). Vendors: Go.
Related threats
- free5GC UDM information disclosure via improper SUPI validation
- GO-2026-4758 - free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request in github.com/free5gc/udm
- GO-2026-4763 - free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error in github.com/free5gc/udm
- GO-2026-4755 - free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques in github.com/free5gc/udm
- GO-2026-4757 - free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference in github.com/free5gc/udm