CVE-2026-8186 in Open5GS
Summary
by MITRE • 05/09/2026
A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs_sbi_client_send_via_scp_or_sepp in the library lib/sbi/client.c of the component NF. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. The patch is named d5bc487fcf9ea87d2b03f2ef95123af344773bfb. It is suggested to install a patch to address this issue.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 05/09/2026
The vulnerability identified in Open5GS versions up to 2.7.7 represents a critical out-of-bounds read condition within the service-based interface client implementation. This flaw exists in the ogs_sbi_client_send_via_scp_or_sepp function located in the lib/sbi/client.c library file, specifically affecting the Network Function (NF) component of the system. The issue stems from improper input validation and memory access handling when processing service-based interface communications, creating a scenario where malicious actors can manipulate the system's behavior through carefully crafted inputs.
The technical nature of this vulnerability allows for remote exploitation, meaning attackers do not require physical access to the system to carry out the attack. The out-of-bounds read occurs when the function processes incoming data without adequate bounds checking, potentially leading to information disclosure, system instability, or even remote code execution depending on the specific implementation details. This type of vulnerability falls under CWE-129, which specifically addresses insufficient bounds checking, and aligns with ATT&CK technique T1059.007 for command and scripting interpreter. The vulnerability's remote exploitability makes it particularly dangerous in networked environments where Open5GS components communicate with other network functions.
The operational impact of this vulnerability extends beyond simple data corruption, as it can potentially expose sensitive system information through memory leaks or allow attackers to gain insights into the internal system state. In the context of 5G core network infrastructure, where Open5GS serves as a crucial component for network function communication, this vulnerability could compromise the integrity of service-based interfaces that handle critical signaling messages between network functions. The affected system components include the service-based interface client library that manages communication between network functions, making it a prime target for attackers seeking to disrupt 5G network operations or escalate privileges within the network infrastructure.
The recommended mitigation strategy involves applying the patch identified by the commit hash d5bc487fcf9ea87d2b03f2ef95123af344773bfb, which addresses the core bounds checking issue in the ogs_sbi_client_send_via_scp_or_sepp function. Organizations should prioritize updating their Open5GS installations to versions beyond 2.7.7 to ensure protection against this vulnerability. Additionally, implementing network segmentation and monitoring for unusual service-based interface traffic patterns can provide additional defensive layers. Security teams should also consider conducting vulnerability assessments to identify any potential exploitation attempts and establish proper incident response procedures for handling similar vulnerabilities in the future. The patch implementation should be followed by thorough testing to ensure no regressions occur in normal system operations while maintaining the security improvements.