FlexRIC v2.0.0 contains a vulnerability in the iApp's xApp isolation mechanism caused by a logic error in the eq_xapp_ric_gen_id() function. Specifically, the function compares m0->xapp_id against itself instead of comparing it to m1->xapp_id, effectively ignoring the identity of the xApp. This flaw allows a malicious xApp connected to the iApp on port 36422 to send a crafted E42_RIC_SUBSCRIPTION_DELETE_REQUEST with a matching ric_gen_id and delete subscriptions belonging to other xApps. This breaks the intended multi-tenant isolation in deployments where multiple xApps share the same RIC instance. The vulnerability is classified under CWE-617 (Reachable Assertion) and has a CVSS v3.1 score of 7.5 (High), with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability.

The vulnerability allows an attacker controlling a malicious xApp to bypass authorization controls and delete subscriptions of other xApps within the same RIC deployment. This breaks multi-tenant isolation and can cause denial of service by disrupting subscription management. There is no impact on confidentiality or integrity according to the CVSS vector, but the availability of subscription services is severely affected. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is documented, users should monitor vendor communications for updates. Until a patch is available, restricting access to the iApp port 36422 to trusted xApps only and implementing network-level controls may reduce exposure, but these are not confirmed mitigations from the vendor.