CVE-2025-69208

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Versions prior to 1.4.1 contain an Improper Error Handling vulnerability with Information Exposure. All deployments of free5GC using the Nnef_PfdManagement service may be affected. The NEF component reliably leaks internal parsing errors (e.g., invalid character 'n' after top-level value) to remote clients. This can aid attackers in fingerprinting server software and logic flows. Version 1.4.1 fixes the issue. There is no direct workaround at the application level. The recommended mitigation is to apply the provided patch.

• CWE-209

• https://github.com/free5gc/free5gc/issues/753Exploit, Issue Tracking, Patch, Vendor Advisory
• https://github.com/free5gc/free5gc/security/advisories/GHSA-f3pc-w7jp-4jh2Patch, Vendor Advisory
• https://github.com/free5gc/udr/commit/91bb34bd96e1c89b3fddca80db8b90049da61ebbPatch
• https://github.com/free5gc/udr/pull/56Issue Tracking, Patch

Published

Feb 23, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-69202Axios Cache Interceptor is a cache interceptor for axios. Pr…6.5
• CVE-2025-69203Signal K Server is a server application that runs on a centr…8.8
• CVE-2025-69204ImageMagick is free and open-source software used for editin…7.5
• CVE-2025-69205Micro Registration Utility (µURU) is a telephone self regist…6.3
• CVE-2025-69206Hemmelig is a messing app with with client-side encryption a…4.3
• CVE-2025-69207Khoj is a self-hostable artificial intelligence app. Prior t…7.1
• CVE-2025-69209ArduinoCore-avr contains the source code and configuration f…6.9
• CVE-2025-6921The huggingface/transformers library, versions prior to 4.53…7.5
• CVE-2025-69210FacturaScripts is open-source enterprise resource planning a…5.4
• CVE-2025-69211Nest is a framework for building scalable Node.js server-sid…7.4
• CVE-2025-69212OpenSTAManager is an open source management software for tec…8.8
• CVE-2025-69213OpenSTAManager is an open source management software for tec…8.8