CVE-2025-62182 is a medium severity vulnerability in Pegasystems Pega Infinity (versions 8.7.0 through 25.1.0) involving unrestricted upload of files with dangerous types by privileged users. This CWE-434 issue allows potentially malicious files to be uploaded without sufficient validation or restriction on file types. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction, and privileges required. No patch or official fix information is currently available.

A privileged user could upload malicious files due to lack of file type restrictions, potentially leading to unauthorized code execution or other malicious activity depending on how the uploaded files are processed or executed. However, the impact is limited by the requirement for privileged user access and no known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict privileged user access to trusted personnel only and monitor file uploads closely. Avoid granting unnecessary upload privileges. Follow vendor advisories for updates.