Access and Mobility Management Function Denial of Service Vulnerability in Open5GS

CVE-2025-52288

What is CVE-2025-52288?

The Access and Mobility Management Function (AMF) in Open5GS versions up to 2.7.5 is vulnerable due to an assertion failure in the ngap_build_downlink_nas_transport function. This vulnerability allows attackers to initiate a denial of service (DoS) by sending repeated connect and disconnect messages from User Equipment (UE), potentially disrupting service for legitimate users. Admins should apply relevant patches and monitor for unusual behavior to protect their networks.

References