CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.8. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-62642
Severity
MEDIUM
CVSS
5.8
EPSS
0.45%
Original NVD Description
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 has an "Anyone Can Join This Party" signup API that does not verify user account creation, allowing a remote unauthenticated attacker to create a user account.
Related CVEs
Other vulnerabilities affecting the same vendor(s)