CVE-2025-53967

HIGH8.0

Framelink Figma MCP Server before 0

Published Oct 8, 2025

Modified 3 months ago

No fix available

Details

Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize user-supplied input, enabling the attacker to inject malicious commands that are executed with the privileges of the MCP process. Exploitation requires network access to the MCP interface.

References

WEBhttps://github.com/GLips/Figma-Context-MCP/blob/96b3852669c5eed65e4a6e20406c25504d9196f2/src/utils/fetch-with-retry.ts#L34 WEBhttps://github.com/GLips/Figma-Context-MCP/releases/tag/v0.6.3 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-53967 WEBhttps://www.imperva.com/blog/another-critical-rce-discovered-in-a-popular-mcp-server/

CVSS Analysis

CVSS v3.1

8.0

Exploitability

Attack Vector

AdjacentAV:A

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

NoneA:N

8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Weakness Type (CWE)

Other

CWE-420

Ecosystems

Timeline

PublishedOct 8, 2025

ModifiedOct 8, 2025