{"id":"EUVD-2025-31753","enisaUuid":"096589fe-a9ba-373e-a71b-7b6e0001597f","description":"Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize user-supplied input, enabling the attacker to inject malicious commands that are executed with the privileges of the MCP process. Exploitation requires network access to the MCP interface.","datePublished":"Oct 8, 2025, 12:00:00 AM","dateUpdated":"Oct 8, 2025, 5:18:20 PM","baseScore":8.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","references":"https://github.com/GLips/Figma-Context-MCP/blob/96b3852669c5eed65e4a6e20406c25504d9196f2/src/utils/fetch-with-retry.ts#L34\nhttps://www.imperva.com/blog/another-critical-rce-discovered-in-a-popular-mcp-server/\nhttps://github.com/GLips/Figma-Context-MCP/releases/tag/v0.6.3\n","aliases":"CVE-2025-53967\nGHSA-gxw4-4fc5-9gr5\n","assigner":"mitre","epss":6.12,"enisaIdProduct":[{"id":"b626b620-99a5-336f-82bc-5f96152b474d","product":{"name":"Figma MCP Server","vendor":{"name":"Framelink"}},"product_version":"0 \u003c0.6.3"}],"enisaIdVendor":[{"id":"30cb2870-18d2-3e38-aa87-89812802717c","vendor":{"name":"Framelink"}}],"enisaIdVulnerability":[{"id":"52d8b16d-c3fc-3914-a170-8ad38305c9f5","vulnerability":{"id":"CVE-2025-53967","description":"Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize user-supplied input, enabling the attacker to inject malicious commands that are executed with the privileges of the MCP process. Exploitation requires network access to the MCP interface.","datePublished":"Oct 8, 2025, 12:00:00 AM","dateUpdated":"Oct 8, 2025, 5:18:20 PM","status":"PUBLISHED","baseScore":8.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","references":"https://github.com/GLips/Figma-Context-MCP/blob/96b3852669c5eed65e4a6e20406c25504d9196f2/src/utils/fetch-with-retry.ts#L34\nhttps://www.imperva.com/blog/another-critical-rce-discovered-in-a-popular-mcp-server/\nhttps://github.com/GLips/Figma-Context-MCP/releases/tag/v0.6.3\n","enisa_id":"EUVD-2025-31753\n","assigner":"mitre","epss":6.12,"dataProcessed":"Nov 6, 2026, 7:21:35 AM","vulnerabilityProduct":[{"id":"1b4a5c62-e66a-310a-9b50-0980c667c83e","product":{"name":"Figma MCP Server","vendor":{"name":"Framelink"}},"product_version":"0 \u003c0.6.3"}],"vulnerabilityVendor":[{"id":"f1aefe8c-106f-3314-a4f2-36173d1e26eb","vendor":{"name":"Framelink"}}]}},{"id":"b7628d8d-591a-34d6-b63d-c8bbae8e9cc7","vulnerability":{"id":"GHSA-gxw4-4fc5-9gr5","description":"figma-developer-mcp vulnerable to command injection in get_figma_data tool","datePublished":"Sep 30, 2025, 5:01:42 PM","dateUpdated":"Sep 30, 2025, 5:01:42 PM","baseScore":0.0,"references":"https://github.com/GLips/Figma-Context-MCP/security/advisories/GHSA-gxw4-4fc5-9gr5\nhttps://github.com/GLips/Figma-Context-MCP/commit/7f4b5859454b0567c2121ff22c69a0344680b124\nhttps://github.com/GLips/Figma-Context-MCP\n","enisa_id":"EUVD-2025-31753\n","aliases":"GHSA-gxw4-4fc5-9gr5\nCVE-2025-53967\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:55:38 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}