This vulnerability in Open5GS up to version 2.7.7 allows a remote attacker to cause a denial of service by manipulating the amf_nsmf_pdusession_handle_update_sm_context function within the AMF component. The issue resides in the handling of session management context updates, leading to service disruption. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability was publicly disclosed, but no official fix or patch has been released by the Open5GS project as of the published date.

Successful exploitation results in denial of service of the AMF component in Open5GS, potentially disrupting 5G core network operations relying on this software. The vulnerability can be triggered remotely without authentication or user interaction, increasing the risk of service interruption. However, there is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the Open5GS project has not responded or released a fix, users should monitor official channels for updates. In the meantime, consider implementing network-level protections such as filtering or rate limiting to reduce exposure to potentially malicious traffic targeting the affected function.