Figma vulnerabilities
We track 1 vulnerability in Figma products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 3, 2025.
1vulnerabilities
0critical
1high
0exploited
8.4average CVSS score
Latest Figma vulnerabilities
- 8.4 High severity
Desktop: Improper Neutralization of Special Elements used in an OS Command
Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to child_process