← Vulnerability feed

Vulnerability record · CVE-2026-77253 · published 22 September 2026

CVE-2026-77253: Mcp-atlassian mcp atlassian path traversal vulnerability

MMcp Atlassian · Mcp Atlassian

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence attachment upload tools accept arbitrary local filesystem paths and send the selected bytes to Atlassian. In HTTP or multi-user deployments, a caller can cross the client-to-server filesystem boundary and disclose configuration, credentials, mounted secrets, or other files readable by the MCP process. The advisory traces the vulnerable input and processing flow through jira_upload_attachment, confluence_upload_attachment, file_path, and server-local filesystem, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.

7.1 CVSS 3.1 High EPSS 0.37% · top 71.3% CWE-22 · Path traversal
7.1CVSS 3.1 base score
0.37%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
5References, 2 tagged exploit
28 Sep 2026Last modified by NVD

Description

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence attachment upload tools accept arbitrary local filesystem paths and send the selected bytes to Atlassian. In HTTP or multi-user deployments, a caller can cross the client-to-server filesystem boundary and disclose configuration, credentials, mounted secrets, or other files readable by the MCP process. The advisory traces the vulnerable input and processing flow through jira_upload_attachment, confluence_upload_attachment, file_path, and server-local filesystem, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460 Patch
https://github.com/sooperset/mcp-atlassian/pull/1448 Issue TrackingPatch
https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0 Release Notes
https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-vc25-24vv-fxxm ExploitVendor Advisory
https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-vc25-24vv-fxxm ExploitVendor Advisory

Track CVE-2026-77253 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2026-77244Mcp-atlassian mcp atlassian improper authentication vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport accepts requ…EPSS 0.28%9.1CVE-2026-77254Mcp-atlassian mcp atlassian missing authentication for critical function vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, requests to the HTTP MCP endpoi…EPSS 0.62%8.8CVE-2026-77274Mcp-atlassian mcp atlassian server-side request forgery (ssrf) vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a bac…EPSS 0.32%8.8CVE-2026-77243Mcp-atlassian mcp atlassian missing authorization vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOLSETS are …EPSS 0.36%8.6CVE-2026-77262Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment ac…EPSS 0.54%8.6CVE-2026-77248Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport a…EPSS 0.41%8.6CVE-2026-77255Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachmen…EPSS 0.40%8.6CVE-2026-77246Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment wi…EPSS 0.43%

Source: NIST National Vulnerability Database (record CVE-2026-77253), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.