CVE-2025-41068 HIGH

CVE-2025-41068: Reachable Assertion vulnerability in Open5GS

Vendor Newplane
Product Open5GS
Weakness CWE-617
Published October 27, 2025
Last update October 29, 2025
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

What the vulnerability does

01Description

Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. This is achieved by sending the creation of an NF with an invalid type via SBI and then requesting its data. The NRF executes a check that crashes the process, leaving the discovery service unresponsive.

Key dates

02Disclosure timeline

October 27, 2025 CVE published
October 29, 2025 Record updated