CVE-2025-15061 | Framelink Figma MCP Server command injection (ZDI-25-1197)

A vulnerability was found in Framelink Figma MCP Server. It has been rated as critical. This vulnerability affects unknown code. This manipulation causes command injection.

This vulnerability is tracked as CVE-2025-15061. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.