← Vulnerability feed

Vulnerability record · CVE-2026-77247 · published 22 September 2026

CVE-2026-77247: Mcp-atlassian mcp atlassian vulnerability

MMcp Atlassian · Mcp Atlassian

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence upload tools interpret caller-controlled path arguments on the MCP server and open those files before sending them as attachments. In remote or multi-user deployments, a permitted client can disclose host files without shell or direct filesystem access. The advisory traces the vulnerable input and processing flow through AttachmentsMixin.upload_attachment, AttachmentsMixin.upload_attachments, file_path, file_paths, and jira update_issue, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.

8.3 CVSS 4.0 High EPSS 0.45% · top 63.8% CWE-73 · CWE-73
8.3CVSS 4.0 base score
0.45%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
5References, 2 tagged exploit
28 Sep 2026Last modified by NVD

Description

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence upload tools interpret caller-controlled path arguments on the MCP server and open those files before sending them as attachments. In remote or multi-user deployments, a permitted client can disclose host files without shell or direct filesystem access. The advisory traces the vulnerable input and processing flow through AttachmentsMixin.upload_attachment, AttachmentsMixin.upload_attachments, file_path, file_paths, and jira update_issue, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460 Patch
https://github.com/sooperset/mcp-atlassian/pull/1448 Issue TrackingPatch
https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0 Release Notes
https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-f6pj-qv47-g96w ExploitVendor Advisory
https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-f6pj-qv47-g96w ExploitVendor Advisory

Track CVE-2026-77247 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.1CVE-2026-77254Mcp-atlassian mcp atlassian missing authentication for critical function vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, requests to the HTTP MCP endpoi…EPSS 0.61%8.8CVE-2026-77274Mcp-atlassian mcp atlassian server-side request forgery (ssrf) vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a bac…EPSS 0.47%8.6CVE-2026-77248Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport a…EPSS 0.42%8.6CVE-2026-77246Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment wi…EPSS 0.22%8.5CVE-2026-77261Mcp-atlassian mcp atlassian server-side request forgery (ssrf) vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook is omitted…EPSS 0.27%8.3CVE-2026-77256Mcp-atlassian mcp atlassian incorrect permission assignment vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the plaintext OAuth fallback fi…EPSS 0.41%8.3CVE-2026-77271Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its…EPSS 0.42%8.0CVE-2026-27825Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, the `confluence_downloa…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2026-77247), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.