Restaurant Brands International Assistant Platform Access Control Vulnerability in Bathroom Rating Interface

Vulnerability

A vulnerability exists in the Restaurant Brands International (RBI) assistant platform, affecting through September 6, 2025, due to a lack of access control on the bathroom rating interface. This oversight allows unauthorized users to potentially manipulate or access sensitive information related to bathroom ratings.

Impact

Exploitation of this vulnerability could lead to unauthorized access and manipulation of bathroom rating data, with potential implications for customer experience and store management.

Added: Oct 17, 2025, 9:17 PM
Updated: Oct 18, 2025, 1:17 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
1.3
exploitability
8.7
remediation
0.0
relevance
0.7
threat
6.4
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.