Desktop vulnerabilities

1 known vulnerability in Desktop from Figma. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  Desktop: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-56803Sep 3, 2025FigmaEPSS 1.07%

  Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to child_process