Improper Input Neutralization in Salesforce Mulesoft Anypoint Code Builder
CVE-2025-64318
Currently unrated
What is CVE-2025-64318?
A vulnerability in Salesforce Mulesoft Anypoint Code Builder allows for the manipulation of writable configuration files due to improper handling of input used for LLM prompting. This flaw, present in versions prior to 1.11.6, can lead to unauthorized modifications, potentially compromising the integrity of the application and the configuration settings.
Affected Version(s)
Mulesoft Anypoint Code Builder 0 < 1.11.6