Type Confusion Vulnerability in free5GC's 5G Core Network Implementation

CVE-2026-44325

What is CVE-2026-44325?

The vulnerability in free5GC's NRF root SBI endpoint POST /oauth2/token exhibits a parser-level type confusion issue. This occurs when the handler interprets several fields improperly and allows an attacker to send a specially crafted unauthenticated request, which can lead to a panic state on the server when data types are incompatible. This results in the endpoint being susceptible to repeated HTTP 500 errors, exposing the system to potential exploitation. The issue has been addressed in version 4.2.2.

References