PT-2026-21580 · Free5Gc · Free5Gc Udm

Published 2026-02-23 · Updated 2026-02-25 · CVE-2025-69251

Positive Technologies (AI Summary)

CVSS v4.0

6.6

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions free5gc UDM versions up to and including 1.4.1

Description free5gc UDM provides Unified Data Management for free5GC, an open-source 5G mobile core network project. A flaw exists where attackers can inject control characters, such as %00, into the ueId parameter. This injection causes internal URL parsing errors (net/url: invalid control character), potentially revealing system implementation details and aiding in service fingerprinting. The Nudm UECM service within free5GC UDM is potentially affected in all deployments.

Recommendations Apply the fix available in free5gc/udm pull request 76.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-69251

GHSA-PWXH-4QH4-HGPQ

Affected Products

Free5Gc Udm

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69251.json · Exploit
• https://github.com/free5gc/free5gc/security/advisories/GHSA-pwxh-4qh4-hgpq · Vendor Advisory
• https://github.com/free5gc/free5gc/issues/76 · Vendor Advisory
• https://github.com/free5gc/free5gc/issues/751 · Vendor Advisory
• https://github.com/free5gc/udm/commit/504b14458d156558b3c0ade7107b86b3d5e72998 · Patch
• https://osv.dev/vulnerability/CVE-2025-69251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69251 · Security Note
• https://twitter.com/CVEnew/status/2026184668643803520 · Twitter Post
• https://t.me/cveNotify/152944 · Telegram Post
• https://t.me/cveNotify/152946 · Telegram Post
• https://t.me/cveNotify/153185 · Telegram Post
• https://twitter.com/CVEarity/status/2026159408275919351 · Twitter Post