CVE-2025-53967
High
Description
Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize user-supplied input, enabling the attacker to inject malicious commands that are executed with the privileges of the MCP process. Exploitation requires network access to the MCP interface.
SeverityHigh
CVSS8.0
Exploit probability—
ProductFigma MCP Server
PublishedOct 8, 2025
First seenOct 8, 2025
Weakness typeCWE-420CWE-420
How to fix
Update
- Framelink Figma MCP Server0.6.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Framelink Figma MCP Server | v < 0.6.3 | 0.6.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.