---
id: CVE-2025-15417
title: A vulnerability was identified in Open5GS up to 2.7.6
summary: >-
  A vulnerability was identified in Open5GS up to 2.7.6. Affected is the
  function sgwc_s11_handle_create_session_request of the file
  src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such
  manipulation leads to denial of servi…
severity: low
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'
cwe:
  - CWE-404
vendor: open5gs
product: open5gs
affected:
  - open5gs <= 2.7.6
published: '2026-01-01'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:10:00.297'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-15417'
references:
  - url: 'https://github.com/open5gs/open5gs/'
    label: cna@vuldb.com
  - url: >-
      https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1
    label: cna@vuldb.com
  - url: 'https://github.com/open5gs/open5gs/issues/4203'
    label: cna@vuldb.com
  - url: 'https://github.com/open5gs/open5gs/issues/4203#issue-3719257558'
    label: cna@vuldb.com
  - url: 'https://github.com/open5gs/open5gs/issues/4203#issuecomment-3681643498'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.339339'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.339339'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.727616'
    label: cna@vuldb.com
  - url: 'https://github.com/open5gs/open5gs/issues/4203#issue-3719257558'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00194
epssPercentile: 0.08471
ingestedAt: '2026-10-14T19:49:57.539Z'
---

## Overview

A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwc_s11_handle_create_session_request of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be carried out locally. The exploit is publicly available and might be used. The name of the patch is 465273d13ba5d47b274c38c9d1b07f04859178a1. A patch should be applied to remediate this issue.

## Affected

- `open5gs <= 2.7.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.