PT-2026-21582 · Free5Gc · Free5Gc

Published 2026-02-24 · Updated 2026-02-25 · CVE-2025-69253

Positive Technologies (AI Summary)

CVSS v4.0

6.6

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions free5GC versions up to and including 1.4.1

Description free5GC is an open-source project for 5G mobile core networks. Improper error handling with information exposure exists in the User Data Repository component. The NEF component leaks internal parsing error details to remote clients, potentially aiding attackers in service fingerprinting. Deployments using the Nnef PfdManagement service may be vulnerable.

Recommendations Apply the patch available in free5gc/udr pull request 56.

Exploit

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2025-69253

GHSA-CJ2H-X8QM-XGWC

Affected Products

Free5Gc

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69253.json · Exploit
• https://github.com/free5gc/free5gc/security/advisories/GHSA-cj2h-x8qm-xgwc · Vendor Advisory
• https://github.com/free5gc/free5gc/issues/753 · Vendor Advisory
• https://github.com/free5gc/udr/pull/56 · Patch
• https://github.com/free5gc/udr/commit/754d23b03755ad59077ed529ce3b971e477080c4 · Patch
• https://osv.dev/vulnerability/CVE-2025-69253 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69253 · Security Note
• https://t.me/cveNotify/152947 · Telegram Post
• https://twitter.com/CVEnew/status/2026184665971974517 · Twitter Post
• https://t.me/cveNotify/153187 · Telegram Post