Description
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided file_path to local file operations without restricting it to the workspace. A remote MCP caller with tool access can cause the server to read sensitive local files and upload them as Atlassian attachments. The advisory traces the vulnerable input and processing flow through streamable-http, upload_attachment, and file_path, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
Published: 2026-09-22
Score: 8.3 High
EPSS: n/a
KEV: No
Impact: Remote File Disclosure
Action: Immediate Patch
AI Analysis

Impact

MCP Atlassian, a protocol server for Atlassian’s Confluence and Jira, contains a flaw whereby HTTP‑exposed upload tools accept a user supplied file_path and pass it directly to local file system operations. This allows an attacker with tool access to supply an arbitrary path, causing the server to read any local file and upload its contents as an Atlassian attachment. The vulnerability is a classic file‑path traversal leading to disclosure of sensitive files.

Affected Systems

The vulnerability affects the MCP Atlassian server provided by sooperset. Versions before 0.22.0 of the product are impacted. The server is used in environments running Atlassian Confluence or Jira.

Risk and Exploitability

The flaw has a CVSS score of 8.3, indicating high severity. No EPSS data is available, and the issue is not listed in the CISA KEV catalog. The attacker can exploit the weakness remotely via the HTTP API, leveraging the upload tools without needing local access. Successful exploitation results in unauthorized reading of arbitrary local files and their exposure as attachments within the Atlassian platform.

Generated by OpenCVE AI on September 22, 2026 at 19:37 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade MCP Atlassian to version 0.22.0 or later, which removes the path handling flaw
  • If an upgrade is not immediately possible, disable the HTTP upload tools or revoke tool access for untrusted callers
  • Configure the server to disallow arbitrary file paths by enforcing strict validation or by restricting the upload tool scope to only permitted directories

Generated by OpenCVE AI on September 22, 2026 at 19:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 22 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Sooperset
Sooperset mcp-atlassian
Vendors & Products Sooperset
Sooperset mcp-atlassian

Tue, 22 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Description MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided file_path to local file operations without restricting it to the workspace. A remote MCP caller with tool access can cause the server to read sensitive local files and upload them as Atlassian attachments. The advisory traces the vulnerable input and processing flow through streamable-http, upload_attachment, and file_path, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
Title MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths
Weaknesses CWE-22
References
Metrics cvssV4_0

{'score': 8.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N'}

Subscriptions

Sooperset Mcp-atlassian
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-09-22T18:08:48.501Z

Reserved: 2026-08-20T19:02:23.417Z

Link: CVE-2026-77257

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-22T19:16:50.163

Modified: 2026-09-22T19:16:50.163

Link: CVE-2026-77257

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-22T20:00:11Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')