CVE-2026-77258CWE-22path-traversal

CVE-2026-77258

High · published September 22, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
26.2
In the wild
Unconfirmed
What it is

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachments.py accepts a caller-controlled file_path and opens the selected server-local file without restricting it to the workspace. A permitted Confluence MCP caller can upload the file as an attachment and disclose data readable by the server process. This issue is fixed in version 0.22.0.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-09-22T22:17Z
Affected products (1)
ProductVersionsFixed in
mcp-atlassian/mcp_atlassian< 0.22.00.22.0
References (5)
https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460 · [email protected]https://github.com/sooperset/mcp-atlassian/pull/1448 · [email protected]https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0 · [email protected]https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-93xw-j965-9mx3 · [email protected]https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-93xw-j965-9mx3 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 24 SEP 03:25Z
    EPSS moved — → 0%
    epss
  • 22 SEP 17:39Z
    MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()
    cvelistv5