CVE-2025-41067 HIGH

CVE-2025-41067: Reachable Assertion vulnerability in Open5GS

Vendor Newplane
Product Open5GS
Weakness CWE-617
Published October 27, 2025
Last update October 29, 2025
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

What the vulnerability does

01Description

Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. An SBI request that deletes the NRF's own registry causes a check that ends up crashing the NRF process and renders the discovery service unavailable.

Key dates

02Disclosure timeline

October 27, 2025 CVE published
October 29, 2025 Record updated