FlexRIC v2.0.0 contains an authorization bypass in the iApp’s xApp isolation mechanism. The function that should compare two xApp IDs instead compares one ID against itself, effectively ignoring the identity dimension of the target xApp. As a result, an attacker can delete any other xApp’s subscriptions by issuing a delete request that appears to originate from a permitted xApp. This flaw undermines multi‑tenant isolation and allows a malicious xApp to tamper with the resources of all other xApps sharing the same RIC, leading to integrity loss and potential service disruption.

The vulnerability applies to FlexRIC version 2.0.0. Only deployments where multiple xApps share the same controller (iApp) are affected. No other vendors or product versions are known to be impacted.

The EPSS score is < 1%, indicating a low but non‑zero likelihood of exploitation, and the CVSS score of 7.5 reflects a high‑medium severity. The vulnerability is not listed in CISA’s KEV catalog, so no known widespread exploitation reports. The flaw permits a malicious actor to connect to the iApp on port 36422 and send a crafted delete request, bypassing intended access controls. Based on the description, the likely attack vector is a malicious xApp that is allowed to communicate with the iApp; once connected, it can exploit the bug without further privileges. The impact is severe because it allows deletion of shared subscriptions, breaking the isolation guarantees of multi‑tenant deployments.