This vulnerability affects the Open5GS open-source 5G core network implementation, specifically the udm_state_operational function within the smf-registrations endpoint component. An attacker can remotely trigger a denial of service condition by manipulating this function. The vulnerability impacts all Open5GS versions from 2.7.0 through 2.7.7. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and limited impact on availability. No official fix or patch has been released as of the publication date.

Successful exploitation results in denial of service, potentially disrupting the affected Open5GS network functions. Since the attack can be executed remotely without authentication or user interaction, it poses a risk to availability of services relying on the affected component. However, the impact is limited to denial of service without indication of data compromise or privilege escalation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded or released a fix, users should monitor official Open5GS channels for updates. In the meantime, consider implementing network-level protections such as filtering or rate limiting access to the smf-registrations endpoint to reduce exposure.