Framelink Figma MCP Server curl-Fallback Command Injection (CVE-2025-53967) - ATR-2026-01928 (8b49affb-56bc-52c7-899f-858be20181dc)
The Vulnerable MCP Project entry cve-2025-53967-figma-mcp-rce (CVE-2025-53967), reported by Imperva Threat Research. Command injection in the Framelink Figma MCP server fetch-with-retry.ts module: when the standard fetch fails, the server falls back to executing curl via child_process.exec while concatenating the URL string without sanitization, enabling arbitrary command execution. Triggerable through prompt injection in Figma design file names, text layers, or component descriptions that smuggle shell metacharacters into the fetched URL. CVSS 8.0.