Restaurant Brands International Assistant
Monthly
Missing access control in the Restaurant Brands International (RBI) assistant platform (all versions through 2025-09-06) leaves the bathroom rating interface reachable and writable by unauthenticated remote requests. The flaw is an authorization failure (CWE-863) whose impact is confined to low-severity integrity tampering with that one feature - no confidentiality or availability effect - and publicly available exploit code exists alongside a public researcher write-up, although EPSS puts near-term exploitation likelihood at only 0.39% (31st percentile) and there is no KEV listing. Because the affected component is a single-vendor, franchise-facing platform rather than ubiquitous software, real exposure is limited to organizations that actually operate an internet-reachable instance of the RBI assistant platform.
Unauthenticated network attackers can gain access to the diagnostic screen of the Restaurant Brands International (RBI) assistant platform (versions through 2025-09-06) because the authorization check protecting that screen is enforced only in the client, allowing anyone to bypass it by tampering with JavaScript, manipulating local state, or calling the underlying endpoint directly. The flaw is rated CVSS 3.1 base 9.9 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) and classified as CWE-603 (Use of Client-Side Authentication); exploitation requires no credentials and no user interaction, and the only practical barrier is network reachability of the platform and its diagnostic endpoint. No public exploit code was identified at time of analysis and there is no confirmed active exploitation (no CISA KEV listing), though the issue was publicly reported in September 2025 press coverage (Malwarebytes, Yahoo News, bobdahacker.com) linking the platform to Burger King, Popeyes and Tim Hortons drive-thru assistants. No vendor-released patch was identified at time of analysis.
The Restaurant Brands International (RBI) assistant platform, in all versions through 2025-09-06, performs authorization for equipment-order submission only in client-side code, so remote attackers can reach the order-submission endpoint and submit or alter equipment orders without authenticating. Publicly available exploit code exists and the flaw was publicized in September 2025 by security researchers and covered by Malwarebytes and Yahoo News, but it is not listed in CISA KEV, so there is no confirmation of active exploitation; EPSS is 0.51% (42nd percentile), indicating low predicted near-term exploitation. Impact is constrained to integrity of the ordering workflow - the CVSS vector (PR:N, UI:N, S:C, C:N/I:L/A:N) shows no confidentiality or availability loss - and the realistic attack surface is limited to RBI's own hosted deployments rather than broadly deployed third-party software.
The Restaurant Brands International (RBI) assistant platform, used across brands such as Burger King, Popeyes, and Tim Hortons, fails to properly authorize requests to an endpoint that controls Drive Thru speaker audio volume, allowing remote unauthenticated attackers to change that volume on affected deployments through 2025-09-06. Publicly available exploit code exists, though the flaw (CWE-863) yields only a low-integrity impact with no confidentiality or availability effect, so successful exploitation produces nuisance-level operational disruption rather than data access or control of the broader platform. EPSS sits at 0.39% (31st percentile) and the issue is not in CISA KEV, so real-world risk is driven primarily by whether a given restaurant's assistant platform endpoint is internet-reachable.
Broken authorization in the Restaurant Brands International (RBI) 'assistant' platform (as it operated through 2025-09-06) lets unauthenticated remote attackers request a JWT and then supply an arbitrary store's path to an API that returns a signed AWS upload URL, enabling file uploads into any store's storage location rather than only their own. Per the assessed vector (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) the flaw is unauthenticated with no user interaction and is scoped to integrity impact only, with no direct confidentiality or availability loss. Publicly available exploit code exists and researchers have publicly demonstrated the issue, though EPSS is low at 0.38% (29th percentile) and there is no CISA KEV confirmation of active exploitation.
Stored audio of Drive Thru conversations between associates and customers on the Restaurant Brands International (RBI) assistant platform can be retrieved by low-privileged remote users, exposing customer and employee voice data. The platform - associated with RBI's Burger King, Tim Hortons and Popeyes brands - is affected in builds through 2025-09-06, and exploitation requires only an authenticated session at a low privilege level (CVSS 3.1 base 7.7, AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). Publicly available exploit code exists and the issue has been covered in public reporting, though it is not confirmed actively exploited (CISA KEV); risk is elevated by the changed-scope, high-confidentiality impact and by the fact that only parties able to reach and authenticate to this proprietary platform are affected.
The Restaurant Brands International (RBI) assistant platform (versions through 2025-09-06) improperly grants administrative privileges through its createToken GraphQL mutation, allowing any authenticated user with a low-privilege account to mint a platform-wide administrative token. Because the token grants full control over the platform, an attacker with even a basic foothold can escalate to complete compromise (CWE-266, Incorrect Privilege Assignment); the assessed CVSS 3.1 base score is 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), with the only prerequisite being a valid authenticated session and no user interaction or special configuration. Publicly available exploit code exists and the flaw is documented in public reporting, though no confirmed active exploitation (CISA KEV) has been recorded at time of analysis.
Information disclosure in the Restaurant Brands International (RBI) assistant platform (the corporate platform behind Burger King, Popeyes, and Tim Hortons ordering/drive-thru tooling) lets any authenticated, low-privilege user harvest personal information belonging to other users through the Global Store Directory, which is designed to share such records across accounts. The CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) confirms the attack is network-reachable with low complexity but requires a valid account, so the realistic threat population is insiders, franchisees/partners, or anyone who can register or obtain credentials rather than anonymous internet users; impact is confined to confidentiality with scope change and no integrity or availability effect. Publicly available exploit code exists and the issue was covered by Malwarebytes and mainstream news outlets, but there is no evidence in the provided data of confirmed active exploitation (no CISA KEV listing).
Cleartext credential disclosure in the Restaurant Brands International (RBI) assistant platform (versions through 2025-09-06) causes user account passwords to be delivered inside plaintext email messages, so anyone able to observe those messages obtains working credentials in full. The flaw is remotely reachable at low complexity and requires no authentication to the platform and no victim interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N, 8.6 High, CWE-319), but its practical exploitation depends on the attacker having visibility into the credential-bearing email path. Publicly available exploit code exists, and the issue has been widely covered in security press (Malwarebytes, Yahoo News, bobdahacker.com); it has not been confirmed as actively exploited (CISA KEV).
Remote unauthenticated account creation in the RBI Assistant platform through 2025-09-06 allows attackers to provision arbitrary user accounts via the 'Anyone Can Join This Party' signup API, which lacks authorization checks (CWE-862). The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N (8.6 HIGH) confirms network-reachable, low-complexity exploitation requiring no credentials or user interaction, though exploitation is limited to attackers who can reach the proprietary RBI service. No public exploit code or confirmed active exploitation has been identified at time of analysis.
Missing access control in the Restaurant Brands International (RBI) assistant platform (all versions through 2025-09-06) leaves the bathroom rating interface reachable and writable by unauthenticated remote requests. The flaw is an authorization failure (CWE-863) whose impact is confined to low-severity integrity tampering with that one feature - no confidentiality or availability effect - and publicly available exploit code exists alongside a public researcher write-up, although EPSS puts near-term exploitation likelihood at only 0.39% (31st percentile) and there is no KEV listing. Because the affected component is a single-vendor, franchise-facing platform rather than ubiquitous software, real exposure is limited to organizations that actually operate an internet-reachable instance of the RBI assistant platform.
Unauthenticated network attackers can gain access to the diagnostic screen of the Restaurant Brands International (RBI) assistant platform (versions through 2025-09-06) because the authorization check protecting that screen is enforced only in the client, allowing anyone to bypass it by tampering with JavaScript, manipulating local state, or calling the underlying endpoint directly. The flaw is rated CVSS 3.1 base 9.9 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L) and classified as CWE-603 (Use of Client-Side Authentication); exploitation requires no credentials and no user interaction, and the only practical barrier is network reachability of the platform and its diagnostic endpoint. No public exploit code was identified at time of analysis and there is no confirmed active exploitation (no CISA KEV listing), though the issue was publicly reported in September 2025 press coverage (Malwarebytes, Yahoo News, bobdahacker.com) linking the platform to Burger King, Popeyes and Tim Hortons drive-thru assistants. No vendor-released patch was identified at time of analysis.
The Restaurant Brands International (RBI) assistant platform, in all versions through 2025-09-06, performs authorization for equipment-order submission only in client-side code, so remote attackers can reach the order-submission endpoint and submit or alter equipment orders without authenticating. Publicly available exploit code exists and the flaw was publicized in September 2025 by security researchers and covered by Malwarebytes and Yahoo News, but it is not listed in CISA KEV, so there is no confirmation of active exploitation; EPSS is 0.51% (42nd percentile), indicating low predicted near-term exploitation. Impact is constrained to integrity of the ordering workflow - the CVSS vector (PR:N, UI:N, S:C, C:N/I:L/A:N) shows no confidentiality or availability loss - and the realistic attack surface is limited to RBI's own hosted deployments rather than broadly deployed third-party software.
The Restaurant Brands International (RBI) assistant platform, used across brands such as Burger King, Popeyes, and Tim Hortons, fails to properly authorize requests to an endpoint that controls Drive Thru speaker audio volume, allowing remote unauthenticated attackers to change that volume on affected deployments through 2025-09-06. Publicly available exploit code exists, though the flaw (CWE-863) yields only a low-integrity impact with no confidentiality or availability effect, so successful exploitation produces nuisance-level operational disruption rather than data access or control of the broader platform. EPSS sits at 0.39% (31st percentile) and the issue is not in CISA KEV, so real-world risk is driven primarily by whether a given restaurant's assistant platform endpoint is internet-reachable.
Broken authorization in the Restaurant Brands International (RBI) 'assistant' platform (as it operated through 2025-09-06) lets unauthenticated remote attackers request a JWT and then supply an arbitrary store's path to an API that returns a signed AWS upload URL, enabling file uploads into any store's storage location rather than only their own. Per the assessed vector (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) the flaw is unauthenticated with no user interaction and is scoped to integrity impact only, with no direct confidentiality or availability loss. Publicly available exploit code exists and researchers have publicly demonstrated the issue, though EPSS is low at 0.38% (29th percentile) and there is no CISA KEV confirmation of active exploitation.
Stored audio of Drive Thru conversations between associates and customers on the Restaurant Brands International (RBI) assistant platform can be retrieved by low-privileged remote users, exposing customer and employee voice data. The platform - associated with RBI's Burger King, Tim Hortons and Popeyes brands - is affected in builds through 2025-09-06, and exploitation requires only an authenticated session at a low privilege level (CVSS 3.1 base 7.7, AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). Publicly available exploit code exists and the issue has been covered in public reporting, though it is not confirmed actively exploited (CISA KEV); risk is elevated by the changed-scope, high-confidentiality impact and by the fact that only parties able to reach and authenticate to this proprietary platform are affected.
The Restaurant Brands International (RBI) assistant platform (versions through 2025-09-06) improperly grants administrative privileges through its createToken GraphQL mutation, allowing any authenticated user with a low-privilege account to mint a platform-wide administrative token. Because the token grants full control over the platform, an attacker with even a basic foothold can escalate to complete compromise (CWE-266, Incorrect Privilege Assignment); the assessed CVSS 3.1 base score is 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), with the only prerequisite being a valid authenticated session and no user interaction or special configuration. Publicly available exploit code exists and the flaw is documented in public reporting, though no confirmed active exploitation (CISA KEV) has been recorded at time of analysis.
Information disclosure in the Restaurant Brands International (RBI) assistant platform (the corporate platform behind Burger King, Popeyes, and Tim Hortons ordering/drive-thru tooling) lets any authenticated, low-privilege user harvest personal information belonging to other users through the Global Store Directory, which is designed to share such records across accounts. The CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) confirms the attack is network-reachable with low complexity but requires a valid account, so the realistic threat population is insiders, franchisees/partners, or anyone who can register or obtain credentials rather than anonymous internet users; impact is confined to confidentiality with scope change and no integrity or availability effect. Publicly available exploit code exists and the issue was covered by Malwarebytes and mainstream news outlets, but there is no evidence in the provided data of confirmed active exploitation (no CISA KEV listing).
Cleartext credential disclosure in the Restaurant Brands International (RBI) assistant platform (versions through 2025-09-06) causes user account passwords to be delivered inside plaintext email messages, so anyone able to observe those messages obtains working credentials in full. The flaw is remotely reachable at low complexity and requires no authentication to the platform and no victim interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N, 8.6 High, CWE-319), but its practical exploitation depends on the attacker having visibility into the credential-bearing email path. Publicly available exploit code exists, and the issue has been widely covered in security press (Malwarebytes, Yahoo News, bobdahacker.com); it has not been confirmed as actively exploited (CISA KEV).
Remote unauthenticated account creation in the RBI Assistant platform through 2025-09-06 allows attackers to provision arbitrary user accounts via the 'Anyone Can Join This Party' signup API, which lacks authorization checks (CWE-862). The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N (8.6 HIGH) confirms network-reachable, low-complexity exploitation requiring no credentials or user interaction, though exploitation is limited to attackers who can reach the proprietary RBI service. No public exploit code or confirmed active exploitation has been identified at time of analysis.