Skip to content
LLMHigh

CVE-2025-10875: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoin…

Occurred
Nov 4, 2025
Published
Nov 4, 2025
Source
NVD CVE

Summary

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.This issue affects Mulesoft Anypoint Code Builder: before 1.11.6.

Tags

  • CVE
  • CVE-2025-10875
  • cvss:MEDIUM

Classification

Category confidence: 90%
Severity confidence: 85%

Rationale: Vulnerability allows code injection via LLM prompting, posing significant security risk.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source