Secuno
ENNL
Book demo

CVE-2025-53967

Framelink Figma MCP Server vulnerability

8.0 HIGHEPSS 5.83%
  1. Published8 Oct 2025

Description

Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize user-supplied input, enabling the attacker to inject malicious commands that are executed with the privileges of the MCP process. Exploitation requires network access to the MCP interface.

CVSS 3.1 breakdown

Attack vectorAdjacent
Attack complexityHigh
Privileges requiredNone
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-402178.8
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via…
CVE-2025-620018.8
BullWall Ransomware Containment supports configurable file and directory exclusions…
CVE-2025-133159.8
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An…
CVE-2025-85578.8
An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered…
CVE-2025-543518.9
In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for…
CVE-2025-543099.0
CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not…

Frequently asked

Is CVE-2025-53967 being actively exploited?

CVE-2025-53967 is not in the CISA KEV catalog. Its EPSS exploit probability is 5.83%.

How severe is CVE-2025-53967?

CVE-2025-53967 has a CVSS 3.1 base score of 8.0, rated high. EPSS estimates a 5.83% probability of exploitation.

How do I fix CVE-2025-53967?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2025-53967 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.