CVE-2021-27653: Pega Infinity

Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days.

Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data exposure.

Affected products

• Pega Infinity: from 7.4.0, before 8.5.3 (fixed in 8.5.3)

Published 2021-04-01. Last modified 2026-06-17.