This vulnerability exists in Open5GS up to version 2.7.7 within the NSSF component's function nssf_nnrf_nsselection_handle_get_from_amf_or_vnssf. An attacker can remotely manipulate this function to cause a denial of service condition. The CVSS 4.0 base score is 5.3, reflecting medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The issue was responsibly disclosed but remains unpatched as of the publication date.

Successful exploitation results in denial of service, potentially disrupting the availability of Open5GS network functions relying on the NSSF component. This could impact network operations dependent on Open5GS but does not indicate privilege escalation or data compromise. There is no confirmed exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded or released a fix, users should monitor official Open5GS channels for updates. Until a patch is available, consider limiting exposure of the affected service to untrusted networks to reduce risk.