CVE-2026-5107 | FRRouting FRR up to 10.5.1 EVPN Type-2 Route bgpd/bgp_evpn.c process_type2_route access control (ID 21098)

A vulnerability, which was classified as critical, has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls.

This vulnerability is documented as CVE-2026-5107. The attack can be initiated remotely. There is not any exploit available.

To fix this issue, it is recommended to deploy a patch.