CVE-2025-15061
Published: 23 January 2026
Summary
CVE-2025-15061 is a critical-severity OS Command Injection (CWE-78) vulnerability in Zerodayinitiative (inferred from references). Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 20.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
This vulnerability is AI-related — categorised as AI Agent Protocols and Integrations; in the Protocol-Specific Risks risk domain.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and AC-6 (Least Privilege).
Deeper analysis
CVE-2025-15061 is a command injection vulnerability in the Framelink Figma MCP Server, specifically within the fetchWithRetry method. The flaw stems from insufficient validation of a user-supplied string that is passed to a system call, enabling arbitrary command execution. It is tracked under CWE-78 and carries a CVSS 3.0 base score of 9.8.
Remote, unauthenticated attackers can exploit the issue over the network to run arbitrary code in the context of the service account. No user interaction or credentials are required, and successful exploitation yields full control over confidentiality, integrity, and availability on affected installations.
The EPSS score rose from a low baseline to a peak of 0.0142 on 2026-02-17 before receding to the current value of 0.0040, indicating a temporary increase in exploitation interest after public disclosure. Details are available in the GitHub Security Advisory GHSA-gxw4-4fc5-9gr5 and the Zero Day Initiative advisory ZDI-25-1197.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-4488
Vulnerability details
Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Framelink Figma MCP Server. Authentication is not required to exploit this vulnerability. The specific flaw exists…
more
within the implementation of the fetchWithRetry method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27877.
- CWE(s)
AI Security AnalysisAI
- AI Category
- AI Agent Protocols and Integrations
- Risk Domain
- Protocol-Specific Risks
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Matched keywords: mcp
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly requires validation of user-supplied input before it is used in system calls, blocking the unsanitized string that enables command injection in fetchWithRetry.
Limits privileges of the service account so that even successful command injection yields reduced impact on the system.
Requires timely remediation of the identified flaw (CWE-78) in the fetchWithRetry implementation to eliminate the injection vector.