Severe Framelink Figma MCP Vulnerability Lets Hackers Execute Code Remotely
Researchers disclosed a now-patched command injection flaw, CVE-2025-53967 (CVSS 7.5), in the figma-developer-mcp Model Context Protocol server, where unvalidated user input is interpolated directly into shell command strings, allowing shell metacharacter...