CVE-2025-62647mediumCWE-863

CVE-2025-62647: medium-severity vulnerability in Restaurant Brands International assistant…

Published · Updated

Follow this CVE+ Monitor assistant platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 0.4%
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Affected products
Restaurant Brands International · assistant platform
Related CVEs — Restaurant Brands International assistant…

In the same product, most dangerous first.

CVE-2025-62645CRITICALCVE-2025-62645EPSS 0.7%CVE-2025-62646MEDIUMCVE-2025-62646EPSS 0.5%CVE-2025-62649MEDIUMCVE-2025-62649EPSS 0.5%CVE-2025-62650HIGHCVE-2025-62650EPSS 0.5%CVE-2025-62642MEDIUMCVE-2025-62642EPSS 0.5%CVE-2025-62644MEDIUMCVE-2025-62644EPSS 0.5%