Open5GS — Vulnerabilities & Security Advisories 6

Open5GS serves as an open-source implementation of 5G core network functions, enabling telecommunications operators and researchers to deploy 5G infrastructure. Historically, it has been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and authentication flaws. The project maintains a moderate security posture with six CVEs recorded, though no major public incidents have been widely reported. Its modular architecture allows for targeted hardening, but default configurations may expose attack surfaces, particularly in web management interfaces and network signaling protocols. Regular updates and careful deployment remain critical for maintaining security in production environments.