CVE-2025-62646

High

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to review the stored audio of…

mitre·CWE-669·Published 2025-10-17

CVSS

7.7

EPSS

0.01

KEV

Exploits

Tags:exclusively-hosted-service

cve.orgen

192 chars

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to review the stored audio of conversations between associates and Drive Thru customers.

NVDen

192 chars

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to review the stored audio of conversations between associates and Drive Thru customers.

La plataforma asistente de Restaurant Brands International (RBI) hasta el 06-09-2025 permite a atacantes remotos revisar el audio almacenado de conversaciones entre asociados y clientes de Drive Thru.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.7	3.1	4.0	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
3.1	Primary	cve.org	5.0	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
3.1	Primary	cve.org	5.0	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
3.1	Secondary	NVD	5.0	3.1	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N