Executive brief
Open5GS is an open-source implementation of 5G and LTE core network functions. A vulnerability in the Network Repository Function (NRF) component allows a remote attacker to exhaust system resources, potentially causing the service to crash. This could disrupt mobile network connectivity and core operations for users relying on the affected 5G infrastructure.
Technical details
A resource consumption vulnerability (CWE-400/CWE-404) exists in Open5GS up to version 2.7.7 within the NRF (Network Repository Function) component. The flaw is located in the 'handle_amf_info' function in '/lib/sbi/nnrf-handler.c'. An attacker can manipulate the 'amfInfoList' or 'nf_info_pool' argument to exhaust the NF-info pool, leading to a crash of the NRF instance. This attack can be performed remotely, though it typically requires the attacker to have the privileges of a registered Network Function (PR:L). A patch has been developed to address this issue.
Affected products
- Open5GS Open5GS up to 2.7.7
Timeline
- 2026-05-31: advisory: NVD publication date
- 2026-05-31: disclosed: Public disclosure of the vulnerability and exploit details