Improper Input Neutralization in Salesforce Mulesoft Anypoint Code Builder
CVE-2025-64318

5.3MEDIUM

Key Information:

Vendor

Salesforce

Status
Mulesoft Anypoint Code Builder
Vendor
CVE Published:
4 November 2025

What is CVE-2025-64318?

A vulnerability in Salesforce Mulesoft Anypoint Code Builder allows for the manipulation of writable configuration files due to improper handling of input used for LLM prompting. This flaw, present in versions prior to 1.11.6, can lead to unauthorized modifications, potentially compromising the integrity of the application and the configuration settings.

Affected Version(s)

Mulesoft Anypoint Code Builder 0 < 1.12.1

References

https://help.salesforce.com/s/articleView?id=005228032&ty...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.