Deserialization Vulnerability in PowSyBl Framework Affects Power System Software

CVE-2025-47771

What is CVE-2025-47771?

The PowSyBl framework, utilized in building power system-oriented software, has a vulnerability in the read method of the SparseMatrix class. This issue, present in versions 6.3.0 to 6.7.1, allows attackers to exploit the deserialization process, potentially leading to unauthorized privilege escalations. The affected method accepts an InputStream and returns a SparseMatrix object. To mitigate this vulnerability, users are advised to update to version 6.7.2 or later, or alternatively, refrain from using SparseMatrix deserialization methods.

References