A vulnerability classified as problematic was found in osrg GoBGP 4.4.0. Affected is the function AdjRib.Update. Such manipulation leads to null pointer dereference.

This vulnerability is traded as CVE-2026-42285. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.