| Package | Affected versions | Patched versions |
|---|---|---|
| restaurant brands international assistant | ≤ 2025-09-06 |
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token with administrative privileges for the entire platform via the createToken GraphQL mutation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free