CVE-2025-62650
No sign of exploitation. No public exploitation artifact known so far.
The RBI assistant platform uses authentication checks only on the user's browser instead of on the server, allowing anyone to bypass security and access diagnostic screens they shouldn't see. This is dangerous because attackers can view or modify sensitive diagnostic information.
CWE-603 (Use of Client-Side Authentication) affects the RBI assistant platform, where authentication validation for diagnostic screen access is performed client-side only. An attacker can bypass browser-side checks through local manipulation or network interception to gain unauthorized access to diagnostic functionality and potentially sensitive system information. No server-side validation is enforced.