Critical severity9.8NVD Advisory· Published Apr 29, 2021· Updated Jun 17, 2026

CVE-2021-27651

Description

In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks.

Affected products

Pega/Infinity
cpe:2.3:a:pega:infinity:*:*:*:*:*:*:*:*
Range: >=8.2.1,<=8.5.2
Pega/Pega Infinityllm-create
Range: 8.2.1 - 8.5.2
Capasystems/Pega Infinityv5
Range: 8.2.1

Patches

Vulnerability mechanics

References

collaborate.pega.com/discussion/pega-security-advisory-a21-hotfix-matrixnvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.043
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000