CVE-2025-60633 Free5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API

What is CVE-2025-60633?

CVE-2025-60633 is a medium-severity denial of service vulnerability in Free5gc Free5gc, published on 24 Nov 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API.

Weakness: CWE-1287

Which versions are affected by CVE-2025-60633?

6 open source packages ship an affected version, including github.com/free5gc/openapi and github.com/free5gc/udm. It affects 1 product.

Products include Free5gc Free5gc.

How do I fix CVE-2025-60633?

Upgrade github.com/free5gc/openapi to 1.2.2 or later.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2025-60633 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-60633 exists.

Other vulnerabilities in Free5gc Free5gc

• CVE-2026-44327 free5GC: NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler Critical 10.0
• CVE-2026-44329 free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers Critical 10.0
• CVE-2026-44330 free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions Critical 10.0
• CVE-2025-63679 Memory corruption in n/a Critical 9.8
• CVE-2026-44315 free5GC's NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions Critical 9.4

All Free5gc Free5gc vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3j9f-7w24-pcqg, GO-2025-4162.