CVE-2026-77257CWE-22path-traversal

CVE-2026-77257

Medium · published September 22, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided file_path to local file operations without restricting it to the workspace. A remote MCP caller with tool access can cause the server to read sensitive local files and upload them as Atlassian attachments. The advisory traces the vulnerable input and processing flow through streamable-http, upload_attachment, and file_path, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
8.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00386 · 31.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-09-22T23:16Z
Affected products (1)
ProductVersionsFixed in
mcp-atlassian/mcp_atlassian< 0.22.00.22.0
References (4)
https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460 · [email protected]https://github.com/sooperset/mcp-atlassian/pull/1448 · [email protected]https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0 · [email protected]https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-mrq8-fv7v-hhjg · [email protected]
EPSS history
Timeline
  • 24 SEP 03:25Z
    EPSS moved — → 0%
    epss
  • 22 SEP 18:08Z
    MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths
    cvelistv5