Skip to content
OpenAdvisories
Medium · 6.0 CVE-2026-1079 EUVD-2026-19640GHSA-5f74-cm8j-hpf8

A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension.

Published Apr 7, 2026 · Updated Apr 7, 2026 · Assigned by Pega

Description

A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension. A bad actor could create a website that contains malicious code that targets PBE. The vulnerability could occur if a user navigates to this website. The malicious website could then present an unexpected message box.

Affected products

VendorProductAffectedFixed
Pegasystems Pega Browser Extension (PBE) < 3.1.45 3.1.45

References