CVE-2025-53967
Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a craft
CVSS
8.0
High
EPSS
6.1%
p93
KEV
—
Exploit Today
28
0-100
Published: Oct 8, 2025 · Last modified: Oct 8, 2026 · CWE-420
5.8%EPSS · 30 days6.1%
2026-10-052026-11-01
Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize user-supplied input, enabling the attacker to inject malicious commands that are executed with the privileges of the MCP process. Exploitation requires network access to the MCP interface.
- github.comhttps://github.com/GLips/Figma-Context-MCP/blob/96b3852669c5eed65e4a6e20406c25504d9196f2/src/utils/fetch-with-retry.ts#L34
- github.comhttps://github.com/GLips/Figma-Context-MCP/releases/tag/v0.6.3
- www.imperva.comhttps://www.imperva.com/blog/another-critical-rce-discovered-in-a-popular-mcp-server/
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1050089.0 CRI51.8%
——16No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.6dCVE-2026-1021345.4 MED11.0%
——3Kiteworks Core did not apply its gateway-level API security controls to every request authenticated through the platform's central authentication service. An authenticated user could reach REST API functionality over a request path on which those controls, including enforcement of signed-out and revoked sessions, were not applied.32dCVE-2026-619093.5 LOW10.4%
——3An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to another user's calendar or address book could read even unshared events or contacts by including the target hrefs in a calendar-multiget or addressbook-multiget REPORT.47dCVE-2026-776395.3 MED33.2%
——10Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022.15dCVE-2026-404355.3 MED13.6%
——4When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blocked addresses. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.7dCVE-2026-402178.8 HIG96.8%
——29LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.7d