Vulnerability in Pegasystems Pega Robot Studio
CVE-2026-1078
An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work with Google Chrome or Microsoft Edge. A bad actor could create a website that includes malicious code. The vulnerability could occur if a Robot Runtime user navigates to the malicious website.
EPSS: 0.003 (24.5th percentile) — read the EPSS interpretation.
Affected products
- Pegasystems Pega Robot Studio — versions 22.1, R25