CVE-2025-15531
Open5GS context.c sgwc_bearer_add assertion
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The issue report is flagged as already-fixed.
| CWE | CWE-617 |
| Vendor | n/a |
| Product | open5gs |
| Published | Jan 17, 2026 |
| Last Updated | Feb 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for n/a open5gs
Be the first to know when new medium vulnerabilities affecting n/a open5gs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
n/a / Open5GS
2.7.0 2.7.1 2.7.2 2.7.3 2.7.4 2.7.5
References
vuldb.com: https://vuldb.com/?id.341598 vuldb.com: https://vuldb.com/?ctiid.341598 vuldb.com: https://vuldb.com/?submit.729339 github.com: https://github.com/open5gs/open5gs/issues/4233 github.com: https://github.com/open5gs/open5gs/issues/4233#issue-3776216182 github.com: https://github.com/open5gs/open5gs/
Credits
🔍 LinZiyu (VulDB User)