Free5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API

MÉDIO 6.5CVE-2025-60633 · GHSA-3j9f-7w24-pcqg · GO-2025-4162 · Published 24/11/2025 · updated 17/06/2026

Em resumo

CVE-2025-60633 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta github.com/free5gc/openapi, github.com/free5gc/udm, free5gc (free5gc).
Chance de exploração nos próximos 30 dias (EPSS): 0.38%, maior que 32.3% das vulnerabilidades.
Correção: atualize para 1.2.2 ou posterior.

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API.

NVD description

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.