Forest Global Training Partners

Cyber Risks · The Hacker News

Severe Framelink Figma MCP Vulnerability Lets Hackers Execute Code Remotely

Summary: Researchers disclosed a now-patched command injection flaw, CVE-2025-53967 (CVSS 7.5), in the figma-developer-mcp Model Context Protocol server, where unvalidated user input is interpolated directly into shell command strings, allowing shell metacharacter injection and remote code execution under the server process's privileges. Imperva, which found and reported the bug in July 2025, traced it to the fallback in src/utils/fetch-with-retry.ts that runs curl via child_process.exec when the standard fetch API fails; version 0.6.3, released September 29, 2025, addresses it.

What's compelling: An attacker on the same network, such as public Wi-Fi or a compromised corporate device, could trigger the flaw, or a victim could be lured to a crafted site through a DNS rebinding attack, and because the server exposes Figma tools to AI coding agents like Cursor, an indirect prompt injection could trick the client into executing unintended actions.

Read the original at The Hacker News ↗

Topics
AI Security
Mentions
CVE-2025-53967
Related