This vulnerability in Open5GS up to version 2.7.7 involves the update_authorized_pcc_rule_and_qos function within the SMF component's npcf-handler.c source file. An attacker can remotely manipulate this function to cause a denial of service condition. The vulnerability requires no user interaction and can be exploited with low complexity, though some privileges are needed. The project has been notified but has not issued a patch or official remediation. The exploit is publicly known, which may facilitate attacks.

Successful exploitation results in denial of service, potentially disrupting the affected Open5GS SMF component's operation. This can impact network service continuity where Open5GS is deployed. The vulnerability is remotely exploitable without user interaction, increasing its risk. However, exploitation requires some level of privileges. No evidence of active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded or released a fix, monitor official Open5GS channels for updates. Until a patch is available, consider limiting access to the affected SMF component and applying network-level controls to reduce exposure to potential attackers.