CVE-2026-15194
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A use-after-free vulnerability has been discovered in Open5GS 2.7.7 in the AMF component, specifically in the amf_context_final function in src/amf/context.c. The attack requires local access and the exploit has been publicly released, enabling potential attacks.
Risk Assessment
The risk involves potential arbitrary code execution or system crash by a local attacker, which could compromise the integrity and availability of network services.
Recommendation
It is recommended to immediately update Open5GS to the latest patched version and restrict local system access to trusted users only.
Original NVD description (English source)
A security flaw has been discovered in Open5GS 2.7.7. This affects the function amf_context_final of the file src/amf/context.c of the component AMF. Performing a manipulation results in use after free. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks.