
- Researcher finds a free nuggets exploit exposed much deeper flaws within McDonald’s systems
- McDonald’s apparently has no obvious path for researchers to report vulnerabilities
- A URL change from “login” to “register” granted account access
What began as an attempt to claim free food through the McDonald’s app rewards system turned into something far more revealing for one expert.