Medium severityNVD Advisory· Published Jan 13, 2026· Updated Apr 15, 2026

CVE-2025-62182

Description

Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file.

Affected products

Pega/Customer Service Frameworkllm-create
Range: >=8.7.0 <=25.1.0

Patches

Vulnerability mechanics

References

support.pega.com/support-doc/pega-security-advisory-l25-vulnerability-remediation-notenvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000