Use After Free Vulnerability in Rapsody by Schneider Electric
CVE-2025-13845

8.4HIGH

Key Information:

Vendor: Schneider Electric
Status: Ecostruxure Power Build Rapsody
Vendor: CVE Published:; 15 January 2026

🔔 Create Schneider Electric Vulnerability Alert

What is CVE-2025-13845?

A Use After Free vulnerability exists in Rapsody, which may allow an attacker to execute arbitrary code on a user's system when a malicious SSD project file is imported. This issue arises due to improper memory management, which can lead to unexpected application behavior and potential compromise of user systems. Users are encouraged to update their software to mitigate this security risk.

Affected Version(s)

EcoStruxure Power Build Rapsody FR v2.8.1.0300 and prior

EcoStruxure Power Build Rapsody ESP v2.8.5.0200 and prior

EcoStruxure Power Build Rapsody PT v2.8.7.0100 and prior

References

https://download.schneider-electric.com/files?p_Doc_Ref=S...

CVSS V4

Score:

8.4

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 15, 2026
Vulnerability Reserved
Dec 1, 2025

CVE-2025-13845 Data

JSON