Unrestricted File Upload Vulnerability in Pega Customer Service Framework
CVE-2025-62182

5.3MEDIUM

Key Information:

Vendor

Pegasystems

Status
Pega Infinity
Vendor
CVE Published:
13 January 2026

What is CVE-2025-62182?

The Pega Customer Service Framework is susceptible to an Unrestricted File Upload vulnerability. In this scenario, a privileged user can upload potentially malicious files, which may lead to significant security risks, including unauthorized access and system compromise. Organizations using affected versions should apply necessary patches and security measures to mitigate these risks.

Affected Version(s)

Pega Infinity 8.7.0

References

https://support.pega.com/support-doc/pega-security-adviso...

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Dorego from AFLAC
.