Detections
Analytics

SCA: security update for github.com/free5gc/pcf (GHSA-6rgm-gr97-x3j5)

high Tenable Cloud Security Plugin ID 441439

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, PCF Npcf_SMPolicyControl
 missing authentication middleware allows unauthenticated access to SM policy handlers and disclosure of
 subscriber SUPI. In NewServer(), the smPolicyGroup route group is created and routes are applied without
 attaching the router authorization middleware. In contrast, other PCF service groups such as
 Npcf_PolicyAuthorization do attach RouterAuthorizationCheck before route registration. Because the
 middleware is missing, requests to the /npcf-smpolicycontrol/v1/sm-policies, /npcf-smpolicycontrol/v1/sm-
 policies/{smPolicyId}, /npcf-smpolicycontrol/v1/sm-policies/{smPolicyId}/update, and /npcf-
 smpolicycontrol/v1/sm-policies/{smPolicyId}/delete endpoints can reach business logic even when no valid
 OAuth token is provided. This vulnerability is fixed in 4.2.2. (CVE-2026-42083)

Solution

Update the github.com/free5gc/pcf library and its related packages to version 1.4.3 or later.

See Also

https://github.com/advisories/GHSA-6rgm-gr97-x3j5

Plugin Details

Severity: High

ID: 441439

Version: Revision 1.5

Type: Local

Family: SCA Checks

Published: 5/7/2026

Updated: 6/1/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3.5

Percentile: 52.04

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 8.5

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:P/A:N

CVSS Score Source: CVE-2026-42083

CVSS v3

Risk Factor: High

Base Score: 8.2

Temporal Score: 7.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/7/2026

Vulnerability Publication Date: 5/7/2026

Reference Information

CVE: CVE-2026-42083

cwe: CWE-862