Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-64318 EUVD-2025-37835GHSA-cgq7-3vmm-7c3m

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writ…

Published Nov 4, 2025 · Updated Nov 11, 2025 · Assigned by Salesforce

Description

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1.

Affected products

VendorProductAffectedFixed
Salesforce Mulesoft Anypoint Code Builder < 1.12.1 1.12.1

References