Framelink
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Figma MCP Server | 2 | – | Jan 23, 2026 |
Exploited and recent CVEs
- CVE-2025-15061 Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerability 2.2%
- CVE-2025-53967 Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that 6.1%