← All advisories

Medium severity6.5OSV Advisory· Published Jan 20, 2026· Updated Jun 17, 2026

CVE-2026-0622

CVE-2026-0622

Description

Open 5GS WebUI uses a hard-coded JWT signing key (change-me) whenever the environment variable JWT_SECRET_KEY is unset

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Open5gs/Open5gsOSV3 versions
v0.1.0, v0.1.1, v0.2.0, …+ 2 more
- (no CPE)range: v0.1.0, v0.1.1, v0.2.0, …
- cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*range: <=2.7.6
- (no CPE)

Patches

Vulnerability mechanics

References

4

github.com/open5gs/open5gs/pull/857nvdIssue TrackingPatch
github.com/open5gs/open5gs/issues/2264nvdIssue TrackingVendor Advisory
www.kb.cert.org/vuls/id/458022nvdThird Party Advisory
github.com/open5gs/open5gs/issues/856nvdIssue Tracking

News mentions

0

No linked articles in our index yet.