CVE-2026-82589: Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of service
A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amfnamfcommhandlen1n2messagetransfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument N1N2MessageTransferReqData.n2InfoContainer.smInfo.n2InfoContent.ngapIeType results in denial of service. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.8.0 is recommended to address this issue. The patch is named abf8a836564b966b5141110fc25ed413c4f17522. It is advisable to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open5GS (N1-N2 Message Handler)to a version that resolves this vulnerability.Fixed in 2.8.0Patch abf8a836564b966b5141110fc25ed413c4f17522
Event History
Frequently Asked Questions
Which deployments are affected?
Open5GS deployments using versions up to 2.7.7 are affected in the N1-N2 Message Handler component, specifically the amf_namf_comm_handle_n1_n2_message_transfer function in src/amf/namf-handler.c.
What does an attacker need to exploit this issue?
The attack can be initiated remotely and requires manipulation of the N1N2MessageTransferReqData.n2InfoContainer.smInfo.n2InfoContent.ngapIeType argument. The supplied vector indicates low attack complexity and low privileges required, with no user interaction.
What is the impact of successful exploitation?
Successful exploitation results in denial of service. The provided metrics indicate availability impact only, with no stated confidentiality or integrity impact.
What should be done if the affected component is in use?
Upgrade Open5GS to version 2.8.0. The identified patch is abf8a836564b966b5141110fc25ed413c4f17522.
How urgent is remediation?
The issue is rated medium severity with a 4.3 score, but a public exploit has been released and may be used in attacks. Prioritize upgrades for remotely reachable deployments.