← Vulnerability feed

Vulnerability record · CVE-2026-77271 · published 22 September 2026

CVE-2026-77271: Mcp-atlassian mcp atlassian path traversal vulnerability

MMcp Atlassian · Mcp Atlassian

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call sites omit base_dir, allowing attacker-selected writes within the working directory. This Python module overwrite can provide code execution when the application later imports the modified module, bypassing the remediation tracked as CVE-2026-27825. This issue is fixed in version 0.22.0.

8.3 CVSS 4.0 High EPSS 0.42% · top 65.9% CWE-22 · Path traversalCWE-94 · Code injection
8.3CVSS 4.0 base score
0.42%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
5References, 2 tagged exploit
28 Sep 2026Last modified by NVD

Description

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call sites omit base_dir, allowing attacker-selected writes within the working directory. This Python module overwrite can provide code execution when the application later imports the modified module, bypassing the remediation tracked as CVE-2026-27825. This issue is fixed in version 0.22.0.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460 Patch
https://github.com/sooperset/mcp-atlassian/pull/1448 Issue TrackingPatch
https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0 Release Notes
https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6vmq-24h2-pj7j ExploitVendor Advisory
https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6vmq-24h2-pj7j ExploitVendor Advisory

Track CVE-2026-77271 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.1CVE-2026-77254Mcp-atlassian mcp atlassian missing authentication for critical function vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, requests to the HTTP MCP endpoi…EPSS 0.61%8.8CVE-2026-77274Mcp-atlassian mcp atlassian server-side request forgery (ssrf) vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a bac…EPSS 0.47%8.6CVE-2026-77248Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport a…EPSS 0.42%8.6CVE-2026-77246Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment wi…EPSS 0.22%8.5CVE-2026-77261Mcp-atlassian mcp atlassian server-side request forgery (ssrf) vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook is omitted…EPSS 0.27%8.3CVE-2026-77256Mcp-atlassian mcp atlassian incorrect permission assignment vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the plaintext OAuth fallback fi…EPSS 0.41%8.3CVE-2026-77247Mcp-atlassian mcp atlassian vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence upload tool…EPSS 0.45%8.0CVE-2026-27825Mcp-atlassian mcp atlassian path traversal vulnerabilityMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, the `confluence_downloa…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2026-77271), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.