Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-10875 EUVD-2025-37836GHSA-75vx-vv5g-q5cq

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.Th…

Published Nov 4, 2025 · Updated Nov 5, 2025 · Assigned by Salesforce

Vendor: Salesforce Product: Mulesoft Anypoint Code Builder

Description

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.This issue affects Mulesoft Anypoint Code Builder: before 1.11.6.

Affected products

VendorProductAffectedFixed
Salesforce Mulesoft Anypoint Code Builder < 1.11.6 1.11.6

References