CVE-2026-10156 - Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption

Back Back to CVE browser

MEDIUM

Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption

Published May 30, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.28%

Description

A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi/nnrf-handler.c of the component nf-instances Endpoint. Executing a manipulation of the argument nf_info_pool can lead to resource consumption. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The issue report is flagged as already-fixed.

Affected products

Vendor Open5gs Product Open5GS Default
n/a
- Version
  2.7.0
  Status
  affected
  Constraints
  -
- Version
  2.7.1
  Status
  affected
  Constraints
  -
- Version
  2.7.2
  Status
  affected
  Constraints
  -
- Version
  2.7.3
  Status
  affected
  Constraints
  -
- Version
  2.7.4
  Status
  affected
  Constraints
  -
- Version
  2.7.5
  Status
  affected
  Constraints
  -
- Version
  2.7.6
  Status
  affected
  Constraints
  -
- Version
  2.7.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Open5gs

Open5GS

n/a

Version	Status	Constraints
2.7.0	affected	-
2.7.1	affected	-
2.7.2	affected	-
2.7.3	affected	-
2.7.4	affected	-
2.7.5	affected	-
2.7.6	affected	-
2.7.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-404

Improper Resource Shutdown or Release

References (5)

https://github.com/open5gs/open5gs/
product
https://github.com/open5gs/open5gs/issues/4480
exploitissue-tracking
https://vuldb.com/submit/818598
third-party-advisory
https://vuldb.com/vuln/367409
vdb-entrytechnical-description
https://vuldb.com/vuln/367409/cti
signaturepermissions-required

Link	Providers	Tags
https://github.com/open5gs/open5gs/		product
https://github.com/open5gs/open5gs/issues/4480		exploitissue-tracking
https://vuldb.com/submit/818598		third-party-advisory
https://vuldb.com/vuln/367409		vdb-entrytechnical-description
https://vuldb.com/vuln/367409/cti		signaturepermissions-required