This vulnerability in Open5GS affects the NRF component's function ogs_sbi_nf_instance_set_id, where improper handling of the nfInstanceId argument allows an attacker to remotely trigger a denial of service. The issue impacts all Open5GS versions from 2.7.0 through 2.7.6. The CVSS 4.0 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, and no privileges or user interaction required. No official remediation or patch has been published by the vendor, and the project has not responded to the issue report. An exploit is publicly available, but no known exploitation in the wild has been confirmed.

Successful exploitation leads to denial of service on the Open5GS NRF component, potentially disrupting network function related to 5G core network resource management. The attack can be performed remotely without authentication or user interaction, increasing the risk of service interruption. However, the impact is limited to denial of service without evidence of further compromise or data breach.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, organizations should monitor official Open5GS channels for updates. In the meantime, consider applying network-level protections to restrict access to the NRF component from untrusted sources to reduce exposure.