CVE-2025-10875 — Salesforce / Mulesoft Anypoint Code Builder

CVE-2025-10875

Salesforce / Mulesoft Anypoint Code Builder PUBLISHED

Description (CNA)

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.This issue affects Mulesoft Anypoint Code Builder: before 1.11.6.

Affected (CNA)

Vendor / product	Versions
Salesforce / Mulesoft Anypoint Code Builder	affected 0 before 1.11.6

CWE

CWE-1427

References

https://help.salesforce.com/s/articleView?id=005228032&type=1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.