What is CVE-2026-106808 in OpenAirInterface?
CVE-2026-106808 is a critical security flaw identified in the OpenAirInterface Core Network vulnerabilidad crítica CVE-2026-115905 context, specifically affecting version 2.2.1 within the OAI CN5G UDM component. The issue resides in the Nudm_UEAU Generate Authentication Data endpoint.
The vulnerability stems from improper handling of user input where the UDM passes attacker-controlled resynchronizationInfo.rand and auts values directly to the conv::hex_str_to_uint8() function without validating the destination buffer size.
Who is affected and how does the exploit work?
The flaw affects OpenAirInterface Core Network version 2.2.1, specifically targeting the UDM module and its handling of authentication data endpoints.
An unauthenticated attacker who possesses access to the Service-Based Interface (SBI) and holds a valid Subscription Permanent Identifier (SUPI) can exploit this weakness by submitting an oversized value. This triggers a stack-based buffer overflow, overwriting adjacent stack memory, corrupting the stack canary, and ultimately terminating the UDM process.
How do I protect my infrastructure?
Organizations utilizing affected 5G core network components should immediately implement defensive measures while awaiting formal patches from the maintainers as tracked on CVE-2026-58946.
Proper network segmentation and strict access controls over the SBI interface are critical to prevent unauthorized interactions with the vulnerable endpoint.
- Restrict network access to the SBI interface using strict firewall rules and network policies.
- Monitor UDM process stability and logs for unexpected terminations or memory corruption indicators.
- Audit valid SUPI credentials and restrict untrusted entities from reaching the Nudm_UEAU Generate Authentication Data endpoint.
- Check the official repository issues at https://github.com/openairinterface/oai-cn5g-udm/issues/4 for patch availability and updates.