CVE-2025-8698

A vulnerability was found in Open5GS up to 2.7.5. It has been classified as problematic. Affected is the function amf_nsmf_pdusession_handle_release_sm_context of the file src/amf/nsmf-handler.c of the component AMF Service. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The name of the patch is 66bc558e417e70ae216ec155e4e81c14ae0ecf30. It is recommended to apply a patch to fix this issue.

• CWE-617

• https://github.com/open5gs/open5gs/commit/66bc558e417e70ae216ec155e4e81c14ae0ecf30Product
• https://github.com/open5gs/open5gs/issues/4012Exploit, Issue Tracking, Third Party Advisory
• https://github.com/user-attachments/files/21356631/amf_nsmf_pdusession_handle_release_sm_context.zipNot Applicable
• https://vuldb.com/?ctiid.319128Permissions Required, VDB Entry
• https://vuldb.com/?id.319128Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.621282Third Party Advisory, VDB Entry

Published

Aug 7, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8691The WP Scriptcase plugin for WordPress is vulnerable to Stor…6.4
• CVE-2025-8692The Coupon API plugin for WordPress is vulnerable to SQL Inj…4.9
• CVE-2025-8693A post-authentication command injection vulnerability in the…8.8
• CVE-2025-8695Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2025-8696If an unauthenticated user sends a large amount of data to t…7.5
• CVE-2025-8697A vulnerability was found in agentUniverse up to 0.0.18 and …6.3
• CVE-2025-8699Some "Stored Value" Unattended Payment Solutions of KioSoft …9.1
• CVE-2025-8700Invoice Ninja's configuration on macOS, specifically the pre…4.8
• CVE-2025-8701A vulnerability was found in Wanzhou WOES Intelligent Optimi…8.8
• CVE-2025-8702A vulnerability classified as critical has been found in Wan…8.8
• CVE-2025-8703A vulnerability classified as critical was found in Wanzhou …8.8
• CVE-2025-8704A vulnerability, which was classified as critical, has been …8.8