CVE-2025-62642: Rbi Restaurant Brands International Assistant

High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days.

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 has an "Anyone Can Join This Party" signup API that does not verify user account creation, allowing a remote unauthenticated attacker to create a user account.

Affected products

• Rbi Restaurant Brands International Assistant: up to and including 2025-09-06

Published 2025-10-17. Last modified 2026-10-08.