CVE-2025-41067

⚡ A rogue request is all it takes to crash your network! An attacker connected to the NRF can trigger a denial of service by sending a specific SBI command — think of it as pulling the fire alarm while everyone is still inside! 🔥 Imagine the NRF as a central hub in a bustling airport. If someone sends a request to delete the airport’s own flight registry, it would cause chaos, leaving all planes grounded and passengers stranded. That’s exactly what this vulnerability allows! If exploited, this vulnerability can cause the NRF process to crash, rendering the discovery service unavailable and disrupting communication across the network. This could lead to significant downtime and impact services relying on the NRF for connectivity, ultimately resulting in increased operational costs.

If exploited, this vulnerability can cause the NRF process to crash, rendering the discovery service unavailable and disrupting communication across the network. This could lead to significant downtime and impact services relying on the NRF for connectivity, ultimately resulting in increased operational costs. To safeguard against this vulnerability, upgrade Open5GS to version 2.7.7 or later immediately. Additionally, consider implementing network segmentation to limit access to the NRF from untrusted sources while monitoring logs for suspicious activities. You've got this! With these steps, you can secure your network and keep your services running smoothly! 🛡️