Skip to content
OpenAdvisories
High · 8.7 Public exploit CVE-2025-41067 EUVD-2025-36180GHSA-m3r7-hp4v-q24g

Reachable Assertion vulnerability in Open5GS

Published Oct 27, 2025 · Updated Oct 29, 2025 · Assigned by INCIBE

Vendor: NewPlane Product: open5GS

Description

Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. An SBI request that deletes the NRF's own registry causes a check that ends up crashing the NRF process and renders the discovery service unavailable.

Affected products

VendorProductAffectedFixed
NewPlane Open5GS ≤ 2.7.5 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • xvk1t1/Open5GS-CVE-2025-41067-CVE-2025-41068-PoC ★ 0 · Nov 9, 2025

    This repository contains the Proof-of-Concept (PoC) exploit scripts for two vulnerabilities, CVE-2025-41067 and CVE-2025-41068. These vulnerabilities affect the NRF (Network Repository Function) comp…

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References