Skip to content
OpenAdvisories
Critical VA-25-304-02 10 CVEs

Restaurant Brands International assistant platform multiple vulnerabilities

Published Oct 31, 2025 · Updated Oct 31, 2025

Vendor: Restaurant Brands International Product: assistant platform

Summary

Restaurant Brands International assistant platform is used to manage restaurants owned by RBI. Multiple vulnerabilities were found in the assistant platform. The most severe vulnerabilities chained together could allow a remote, unauthenticated attacker to create an account and escalate the privileges of that account to access personally identifiable information and read/write access to store information. Reporters took down their original work, stating: "We received a DMCA copyright infringement complaint from Cyble Inc., acting on behalf of Burger King, regarding our blog post about Restaurant Brands International's drive-thru system vulnerabilities. The complaint alleges trademark infringement and claims the content 'promotes illegal activity and spreads false information.'"

Vulnerabilities 10

Revision history

  1. #1.0.0

    Initial publication