Auth bypass in Pegasystems Pega Infinity

CVE-2025-62180

Pega Platform versions 8.3.0 through Infinity 25.1.2 are affected by an authorization weakness that may allow authenticated users to access certain additional data via crafted URLs.

Vulnerability class: IDOR (Insecure Direct Object Reference)