CVE-2025-62645 | Restaurant Brands International Assistant Platform up to 2025-09-06 GraphQL Mutation privileges assignment

A vulnerability was found in Restaurant Brands International Assistant Platform up to 2025-09-06. It has been classified as critical. This affects an unknown function of the component GraphQL Mutation Handler. This manipulation causes incorrect privilege assignment.

This vulnerability appears as CVE-2025-62645. The attack may be initiated remotely. There is no available exploit.

This product is available as a managed service. Users are not able to maintain vulnerability countermeasures themselves.