# CVE-2026-82548: Linux Foundation Magma information disclosure in InitialUEMessage

Source: https://junglewise.ai/threats/cve-2026-82548-linux-foundation-magma-information-disclosure-in-initialuemessage  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-30. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-82548 · Severity: medium · CVSS 5.3 · Published 2026-08-30

Linux Foundation Magma is an open-source platform used to manage mobile networks and cellular infrastructure. A vulnerability in its 5G Access Gateway component allows attackers to submit unencrypted security-sensitive information (such as device capabilities) within initial registration messages that should be protected by encryption. An attacker could exploit this to leak device capability information for fingerprinting or profiling purposes.

Technologies: [Linux Foundation Magma](https://junglewise.ai/threats/technologies/magma). Vendors: [Linux Foundation](https://junglewise.ai/threats/vendors/linux-foundation).

## Quick answers

**Is CVE-2026-82548 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-82548 being exploited in the wild.

**How severe is CVE-2026-82548?** Medium severity, with a CVSS score of 5.3, published 30 August 2026.

**Which products and versions are affected?** Linux Foundation Magma 1.9.0.

**Is there a fix for CVE-2026-82548?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-82548 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-82548?** Check whether you run Linux Foundation Magma at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an information disclosure flaw in the InitialUEMessage handler of Magma's Access Gateway (AMF component). The root cause is that the AMF accepts non-cleartext Information Elements (IEs), specifically the Capability 5GMM IE, in the InitialUEMessage during 5G registration, violating 3GPP TS 24.501 security requirements which mandate that only cleartext IEs be accepted until a security context is established. An unauthenticated remote attacker can send a specially crafted InitialUEMessage containing sensitive device capability information in unencrypted form, causing the AMF to process it without rejection. This allows leakage of device capabilities that could be used for device fingerprinting or profiling attacks. A fix is expected in future Magma releases.

## Affected products

- Linux Foundation Magma 1.9.0

## Timeline

- 2026-07-15: disclosed: Issue #16022 reported on GitHub
- 2026-08-30: advisory: CVE-2026-82548 published

## References

- [https://github.com/magma/magma/issues/16022](https://github.com/magma/magma/issues/16022)
- [https://vuldb.com/cve/CVE-2026-82548](https://vuldb.com/cve/CVE-2026-82548)

## Related threats

- [Linux Foundation Magma gNB termination context cleanup denial of service](https://junglewise.ai/threats/cve-2026-82552-linux-foundation-magma-gnb-termination-context-cleanup-denial-of)
- [Linux Foundation Magma NGSetup Handler state issue](https://junglewise.ai/threats/cve-2026-82551-linux-foundation-magma-ngsetup-handler-state-issue)
- [Linux Foundation Magma NGSetupRequest improper input validation](https://junglewise.ai/threats/cve-2026-82550-linux-foundation-magma-ngsetuprequest-improper-input-validation)
- [Linux Foundation Magma improper integrity validation in SecurityModeComplete handler](https://junglewise.ai/threats/cve-2026-82549-linux-foundation-magma-improper-integrity-validation-in)
- [Linux Foundation Magma improper authentication in Registration Complete message handler](https://junglewise.ai/threats/cve-2026-82547-linux-foundation-magma-improper-authentication-in-registration)