{"data":{"id":"80b31b18-7db9-46a6-9d1a-ed808317fef4","title":"CVE-2025-10875: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder…","summary":"CVE-2025-10875 is an Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder that allows Code Injection. The issue affects Mulesoft Anypoint Code Builder before 1.11.6 and is classified as CWE-94, Improper Control of Generation of Code ('Code Injection'). NVD has not yet provided an assessment.","solution":"Upgrade to Mulesoft Anypoint Code Builder 1.11.6 or later. The source identifies versions before 1.11.6 as affected and links a Salesforce vendor advisory (help.salesforce.com, article 005228032).","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-10875","publishedAt":"2025-11-04T19:17:09.160Z","cveId":"CVE-2025-10875","cweIds":["CWE-94"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Salesforce Mulesoft Anypoint Code Builder"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Mulesoft Anypoint Code Builder code injection via LLM prompt input","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00214,"epssCheckedAt":"2026-11-04T12:08:33.690Z","kevDateAdded":null,"advisoryAliases":["GHSA-75vx-vv5g-q5cq"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T06:10:38.371Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}