CVE-2026-8729: Open5GS NRF message.c denial of service
A vulnerability was detected in Open5GS up to 2.7.7. This affects an unknown function in the library /lib/sbi/message.c of the component NRF. Performing a manipulation of the argument service-names/snssais results in denial of service. The attack is possible to be carried out remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to the NRF SBI/API endpoints to trusted hosts only (use firewall rules, network ACLs or host-based filtering). Prevent direct exposure of the NRF service to untrusted networks or the public internet.
- Compensating control
Deploy application-level filtering (WAF/reverse-proxy) to block or drop requests that manipulate the service-names or snssais arguments (reject malformed, unexpected or overly long values) before they reach the NRF component.
- Operational
Enable and monitor detailed NRF access and error logs for requests involving service-names/snssais, create alerts for anomalous or high-volume requests, and block identified attacker IP addresses.
- Operational
If exposure cannot be mitigated and risk is unacceptable, consider temporarily disabling or taking the NRF service offline until a vendor fix or other remediation is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8729?
CVE-2026-8729 has been classified with a severity level that indicates it can lead to a denial of service.
How do I fix CVE-2026-8729?
To mitigate CVE-2026-8729, upgrade Open5GS to a version later than 2.7.7 where the vulnerability has been addressed.
What systems are affected by CVE-2026-8729?
CVE-2026-8729 affects Open5GS versions up to and including 2.7.7.
What type of vulnerability is CVE-2026-8729?
CVE-2026-8729 is a denial of service vulnerability that can be exploited through argument manipulation.
Who is the vendor responsible for addressing CVE-2026-8729?
Open5GS is the vendor responsible for addressing the vulnerability CVE-2026-8729.