CVE-2026-37233 — HIGH (7.5)

Vulnerability Description

FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0->xapp_id against itself (m0->xapp_id) instead of the other argument (m1->xapp_id), effectively ignoring the xApp identity dimension. A malicious xApp connected to the iApp (port 36422) can delete any other xApp's subscriptions by sending an E42_RIC_SUBSCRIPTION_DELETE_REQUEST with a matching ric_gen_id. This breaks multi-tenant isolation in any deployment with multiple xApps sharing the same RIC.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Mosaic5G	Flexric	2.0.0

Related Weaknesses (CWE)

CWE-617

References

https://github.com/MinamiKotor1/oran-security-advisories-zhongnan-luo/blob/main/ExploitMitigationThird Party Advisory
https://gitlab.eurecom.fr/mosaic5g/flexricProduct

FAQ

What is CVE-2026-37233?

CVE-2026-37233 is a vulnerability with a CVSS score of 7.5 (HIGH). FlexRIC v2.0.0 contains an authorization bypass in the iApp's xApp isolation mechanism. The equality function eq_xapp_ric_gen_id() in src/ric/iApp/xapp_ric_id.c compares m0->xapp_id against itself (m0...

How severe is CVE-2026-37233?

CVE-2026-37233 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-37233?

Check the references section above for vendor advisories and patch information. Affected products include: Mosaic5G Flexric.