SCA: security update for github.com/free5gc/pcf (GHSA-98cp-84m9-q3qp)

high Tenable Self-Hosted Container Security Plugin ID 440770

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation
(5G) mobile core networks. A memory leak vulnerability in versions prior to 1.4.3 allows any
unauthenticated attacker with network access to the PCF SBI interface to cause uncontrolled memory growth
by sending repeated HTTP requests to the OAM endpoint. The root cause is a `router.Use()` call inside an
HTTP handler that registers a new CORS middleware on every incoming request, permanently growing the Gin
router's handler chain. This leads to progressive memory exhaustion and eventual Denial of Service of the
PCF, preventing all UEs from obtaining AM and SM policies and blocking 5G session establishment. Version
1.4.3 contains a patch. (CVE-2026-41135)

Solution

Update the github.com/free5gc/pcf library and its related packages to version 1.4.3 or later.

Plugin Details

Severity: High

ID: 440770

Version: Revision 1.5

Type: Local

Family: SCA Checks

Published: 4/23/2026

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 94.39

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2026-41135

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 4/22/2026

Vulnerability Publication Date: 4/21/2026

Reference Information

CVE: CVE-2026-41135

cwe: CWE-400

Detections

Analytics