CVE-2025-64319

The Salesforce Mulesoft Anypoint Code Builder is affected by a vulnerability caused by incorrect permission assignment for a critical resource . This flaw allows an attacker to manipulate writeable configuration files . The issue impacts versions prior to 1.12.1 (specifically noted as prior to 1....

CVE-2025-10875

A vulnerability exists in Salesforce Mulesoft Anypoint Code Builder prior to version 1.11.6 due to improper neutralization of input used for LLM prompting . This flaw allows for Code Injection when the application handles prompts sent to Large Language Models (LLMs). To mitigate this risk, users ...

CVE-2025-64318

The Salesforce Mulesoft Anypoint Code Builder is vulnerable to an Improper Neutralization of Input Used for LLM Prompting vulnerability (CWE-1427, CWE-94). This flaw allows an attacker to manipulate writeable configuration files . The issue affects versions prior to 1.12.1 (some sources specify p...