What is CVE-2025-41068?

CVE-2025-41068 is a high-severity vulnerability in Newplane Open5gs, classified under Reachable Assertion. CVSS score: 7.5/10. Published 2025-10-27.

How severe is CVE-2025-41068?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Newplane Open5gs

CVE-2025-41068

Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. This is achieved by sending the creation of an NF with an invalid type via SBI and then requesting its data. The NRF executes a check that crashes the process, leaving the discovery service unresponsive.

EPSS: 0.003 (25.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Newplane Open5gs — versions 0
Open5gs

Weakness classification (CWE)

CWE-617 — Reachable Assertion

References

cve-coordination@incibe.es (Third Party Advisory)
cve-coordination@incibe.es (patch)

Frequently asked questions

What is CVE-2025-41068?: CVE-2025-41068 is a high-severity vulnerability in Newplane Open5gs, classified under Reachable Assertion. CVSS score: 7.5/10. Published 2025-10-27.
How severe is CVE-2025-41068?: High severity. CVSS v3 base score is 7.5 out of 10.