CVE-2026-44328: Nf Instance Id Ephemeral Uuid No Config

An initialization function with no configuration parameter assigns a randomly generated UUID (uuid.New().String()) directly to an NF instance ID field. A non-persistent, non-configurable NF instance ID breaks NRF registration continuity: because OAuth2Required defaults to false and is only set true after successful NRF registration, an ever-changing instance

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-44328-nf-instance-id-ephemeral-uuid-no-config --engine opengrep

Description

An initialization function with no configuration parameter assigns a randomly generated UUID (uuid.New().String()) directly to an NF instance ID field. A non-persistent, non-configurable NF instance ID breaks NRF registration continuity: because OAuth2Required defaults to false and is only set true after successful NRF registration, an ever-changing instance