CVE-2025-62651: Rbi Restaurant Brands International Assistant

Medium severity, CVSS 5.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 does not implement access control for the bathroom rating interface.

Affected products

• Rbi Restaurant Brands International Assistant: up to and including 2025-09-06

Published 2025-10-17. Last modified 2026-10-08.