Vulnerability · Published Oct 8, 2025 · Assigned by mitre
CVE-2025-53967
High 8.0
In plain English
A high-severity security flaw in Figma MCP Server from Framelink. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 6.1% (higher than 93% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize user-supplied input, enabling the attacker to inject malicious commands that are executed with the privileges of the MCP process. Exploitation requires network access to the MCP interface.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | figma-developer-mcp | 0.6.3 | GHSA-gxw4-4fc5-9gr5 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Framelink | Figma MCP Server | 0 – before 0.6.3 |
Weakness: CWE-420 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N