CVE-2025-69253 Details
Description
free5GC is an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 of the User Data Repository are affected by Improper Error Handling with Information Exposure. The NEF component reliably leaks internal parsing error details (e.g., invalid character 'n' after top-level value) to remote clients, which can aid attackers in service fingerprinting. All deployments of free5GC using the Nnef_PfdManagement service may be vulnerable. free5gc/udr pull request 56 contains a patch. No direct workaround is available at the application level. Applying the official patch is recommended.
A vulnerability exists in the free5GC User Data Repository (UDR) component, specifically in versions through 1.4.1, within the 5G mobile core network framework. The issue arises from improper error handling that leads to information exposure. When the Nnef_PfdManagement service is used and a requested application PFD data is not found, the UDR incorrectly returns a 404 error. Instead of properly mapping this to a client-side error, the NEF component attempts to parse the UDR's error response as JSON, fails, and subsequently returns a 500 Internal Server Error. This not only misrepresents the error state but also leaks internal parsing error details to remote clients, potentially aiding in service fingerprinting.
Users are advised to upgrade to free5GC version 1.4.2 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/free5gc/free5gc/issues/753 | [email protected] | ExploitIssue TrackingVendor Advisory |
| https://github.com/free5gc/free5gc/security/advisories/GHSA-cj2h-x8qm-xgwc | [email protected] | Vendor Advisory |
| https://github.com/free5gc/udr/commit/754d23b03755ad59077ed529ce3b971e477080c4 | [email protected] | Patch |
| https://github.com/free5gc/udr/pull/56 | [email protected] | Issue TrackingPatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-209 | Generation of Error Message Containing Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| free5gc udr | <= 1.4.1 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 25, 2026 | Initial Analysis | [email protected] |
| Feb 24, 2026 | New CVE Received | [email protected] |