Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

Researchers from Nanyang Technological University identified 84 vulnerabilities, termed implicit trust errors (iTrue), in 4G and 5G core network implementations, including Open5GS, free5GC, and others. These flaws stem from blind trust between core network functions and can enable denial-of-service attacks and session hijacking when exploited. A critical session hijacking flaw allows attackers to redirect a victim's uplink traffic by injecting malicious PFCP Session Modification Requests with duplicate Packet Detection Rule (PDR) IDs. The vulnerabilities affect both open-source and commercial 5G deployments, with one vendor (Dotouch) having patched CVE-2026-8233, while another major vendor remains unpatched.

AI-extracted · verify before operational use