PT-2026-3087 · Rhapsody · Rhapsody

Published 2025-08-14 · Updated 2026-02-12 · CVE-2025-13845

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Rapsody (affected versions not specified)

Description A Use After Free issue exists in Rapsody that could lead to remote code execution. This occurs when a user imports a malicious project file (SSD file). The issue involves improper memory management, specifically a Use After Free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-04461

CVE-2025-13845

ZDI-26-084

ZDI-26-085

ZDI-26-086

ZDI-26-087

ZDI-26-088

ZDI-26-089

ZDI-26-090

ZDI-26-091

ZDI-26-092

ZDI-26-093

ZDI-26-094

Affected Products

Rhapsody

References · 15

• https://zerodayinitiative.com/advisories/ZDI-26-084 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-013-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-013-04.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13845 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-088 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-090 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-085 · Security Note
• https://bdu.fstec.ru/vul/2026-04461 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-089 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-092 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-086 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-087 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-091 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-093 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-094 · Security Note
• https://twitter.com/CVEnew/status/2011926071697162639 · Twitter Post