Executive brief
Open5GS is an open-source implementation of 5G and LTE mobile core networks. A vulnerability in its communication library can allow a remote attacker to cause a denial of service, potentially disrupting mobile network connectivity and core services. This issue is particularly significant for operators using Open5GS to manage cellular infrastructure.
Technical details
A resource management vulnerability (CWE-404) exists in Open5GS versions up to 2.7.7 within the Service-Based Interface (SBI) library. Specifically, the function 'ogs_pool_id_calloc' in '/lib/sbi/nghttp2-server.c' is susceptible to resource exhaustion, likely related to HTTP/2 server pool management during header processing. A remote attacker with low privileges can exploit this to trigger a denial of service (DoS) condition. Public exploit code has been reported, and users are advised to apply available patches from the Open5GS GitHub repository.
Affected products
- Open5GS Open5GS up to 2.7.7
Timeline
- 2026-05-30: disclosed: Vulnerability published via VulDB and NVD