← Vulnerability feed

Vulnerability record · CVE-2026-77246 · published 22 September 2026

CVE-2026-77246: Mcp-atlassian mcp atlassian path traversal vulnerability

MMcp Atlassian · Mcp Atlassian

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an Authorization identity and permits attacker-controlled Atlassian service headers, including X-Atlassian-Confluence-Url, to select a public attacker hostname or one allowed by MCP_ALLOWED_URL_DOMAINS. A caller can then invoke confluence_upload_attachment or the Jira attachment variant in src/mcp_atlassian/jira/attachments.py with a server-local file_path and cause the MCP process to send the file to the selected attachment endpoint. This issue is fixed in version 0.22.0.

8.6 CVSS 3.1 High EPSS 0.22% · top 89.0% CWE-22 · Path traversalCWE-200 · Information exposure
8.6CVSS 3.1 base score
0.22%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
5References, 2 tagged exploit
28 Sep 2026Last modified by NVD

Description

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an Authorization identity and permits attacker-controlled Atlassian service headers, including X-Atlassian-Confluence-Url, to select a public attacker hostname or one allowed by MCP_ALLOWED_URL_DOMAINS. A caller can then invoke confluence_upload_attachment or the Jira attachment variant in src/mcp_atlassian/jira/attachments.py with a server-local file_path and cause the MCP process to send the file to the selected attachment endpoint. This issue is fixed in version 0.22.0.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460 Patch
https://github.com/sooperset/mcp-atlassian/pull/1448 Issue TrackingPatch
https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0 Release Notes
https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wv8v-v4c5-v75j ExploitVendor Advisory
https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wv8v-v4c5-v75j ExploitVendor Advisory

Track CVE-2026-77246 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.1CVE-2026-77254Mcp-atlassian mcp atlassian missing authentication for critical function vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, requests to the HTTP MCP endpoi…EPSS 0.61%8.8CVE-2026-77274Mcp-atlassian mcp atlassian server-side request forgery (ssrf) vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a bac…EPSS 0.47%8.6CVE-2026-77248Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport a…EPSS 0.42%8.5CVE-2026-77261Mcp-atlassian mcp atlassian server-side request forgery (ssrf) vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook is omitted…EPSS 0.27%8.3CVE-2026-77256Mcp-atlassian mcp atlassian incorrect permission assignment vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the plaintext OAuth fallback fi…EPSS 0.41%8.3CVE-2026-77247Mcp-atlassian mcp atlassian vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence upload tool…EPSS 0.45%8.3CVE-2026-77271Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its…EPSS 0.42%8.0CVE-2026-27825Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, the `confluence_downloa…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2026-77246), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.