CVE-2025-62645
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token with administrative privileges for the e…
Published: 2025-10-17 · CVSS: 9.9 · CVSS 3.1
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token with administrative privileges for the entire platform via the createToken GraphQL mutation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7