Deserialization Vulnerability in PowSyBl Framework Affects Power System Software

CVE-2025-47771

What is CVE-2025-47771?

The PowSyBl framework, utilized in building power system-oriented software, has a vulnerability in the read method of the SparseMatrix class. This issue, present in versions 6.3.0 to 6.7.1, allows attackers to exploit the deserialization process, potentially leading to unauthorized privilege escalations. The affected method accepts an InputStream and returns a SparseMatrix object. To mitigate this vulnerability, users are advised to update to version 6.7.2 or later, or alternatively, refrain from using SparseMatrix deserialization methods.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References