← Back to browse · API

CVE-2025-62645

Severity
CRITICAL
CVSS
9.9
EPSS
0.00668
Risk score
39.83
CISA KEV
No
PoC
No
Published
2025-10-17
Modified
2025-10-29
First seen
2026-08-07
Aliases
EUVD-2025-34928, GHSA-4VMQ-6F4X-FH3W
Products
Restaurant Brands International:assistant platform 0 ≤2025-09-06
Sources
euvd EUVD-2025-34928

Description

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token with administrative privileges for the entire platform via the createToken GraphQL mutation.

References