This vulnerability affects Open5GS versions 2.7.0 through 2.7.7 in the function amf_namf_comm_handle_registration_status_update_request located in /lib/app/ogs-init.c, specifically in the /namf-comm/v1/ue-contexts/{ueContextId}/transfer-update endpoint. Manipulating the ueContextId argument can trigger a denial of service condition. The vulnerability can be exploited remotely without user interaction or privileges. The CVSS 4.0 base score is 5.3, indicating medium severity. The project has been notified but has not issued a fix or official response as of the publication date.

Successful exploitation results in denial of service of the affected Open5GS component, potentially disrupting 5G core network operations that rely on this software. The attack can be initiated remotely and does not require privileges or user interaction. There is no evidence of exploitation in the wild at this time. The lack of an official fix means affected deployments remain vulnerable.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the Open5GS project has not responded or released a fix, users should monitor official channels for updates. In the meantime, consider implementing network-level protections to restrict access to the vulnerable endpoint and limit exposure to untrusted sources.