On October 14, 2025, as part of the monthly 'Patch Tuesday,' a command injection vulnerability identified as CVE-2025-53967 was disclosed and patched in Figma's figma-developer-mcp server. The vulnerability carried a CVSS score of 7.5, indicating a high severity. The patch was included in version 0.6.3 of the affected software. This security update is crucial for developers using Figma's tooling to prevent potential unauthorized command execution. No market reaction or widespread exploitation was mentioned in the immediate reports.