—
GO-2026-5189
Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI in github.com/free5gc/pcf
Quick fix
GO-2026-5189 — github.com/free5gc/pcf: upgrade to the fixed version with the command below.
go get github.com/free5gc/pcf@v1.4.3Details
Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI in github.com/free5gc/pcf
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/free5gc/free5gc/security/advisories/GHSA-6rgm-gr97-x3j5[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-42083[ADVISORY]
- https://github.com/free5gc/pcf/commit/8c4d457cdf58bb239ee30e88c56b370b22073964[FIX]
- https://github.com/free5gc/pcf/pull/63[FIX]
- https://github.com/free5gc/free5gc/issues/844[WEB]