This vulnerability in Open5GS up to version 2.7.7 allows a remote attacker to cause a denial of service by manipulating the ogs_sbi_discovery_option_add_snssais function in the NSSF component's /lib/sbi/message.c file. The flaw enables disruption of service remotely without requiring authentication or user interaction. Although the exploit has been publicly disclosed, the Open5GS project has not issued a fix or official remediation guidance as of the publication date.

Successful exploitation results in denial of service, potentially disrupting the availability of Open5GS network functions relying on the NSSF component. This could impact network operations that depend on Open5GS for 5G core network services. There is no indication of privilege escalation, data disclosure, or integrity compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded or released a fix, users should monitor official Open5GS channels for updates. In the meantime, consider applying network-level protections to limit exposure of the vulnerable service to untrusted sources.