Description
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by _process_authentication_headers and used to construct Atlassian fetchers without calling validate_url_for_ssrf. A caller who can set these headers can supply an internal or metadata-service URL and cause the server to send requests to that destination, bypassing the incomplete CVE-2026-27826 remediation. This issue is fixed in version 0.22.0.
Published: 2026-09-22
Score: 8.3 High
EPSS: n/a
KEV: No
Impact: Server‑Side Request Forgery (SSRF)
Action: Apply patch
AI Analysis

Impact

The MCP Atlassian server builds Atlassian fetchers from the X‑Atlassian‑Jira‑Url and X‑Atlassian‑Confluence‑Url headers without calling the URL‑validation routine, allowing a remote caller to supply internal or metadata‑service URLs and force the server to issue requests to those destinations. This bypasses the incomplete remediation of CVE‑2026‑27826 and can expose internal network resources or sensitive metadata to an attacker, potentially enabling data exfiltration or internal system compromise.

Affected Systems

sooperset’ MCP Atlassian server, versions earlier than 0.22.0

Risk and Exploitability

The CVSS score of 8.3 indicates high severity. Based on the description, the likely attack vector is remote over the network, and an attacker who can set custom HTTP headers can exploit this flaw with no special prerequisites. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, so the assigned score reflects the inherent risk rather than known exploitation activity.

Generated by OpenCVE AI on September 22, 2026 at 20:12 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade MCP Atlassian to version 0.22.0 or later to include the missing validate_url_for_ssrf check
  • If an upgrade is not currently possible, enforce strict validation or a whitelist for the X‑Atlassian‑Jira‑Url and X‑Atlassian‑Confluence‑Url headers to restrict URLs to approved hosts
  • As a temporary workaround, remove or disable the ability to set these headers in incoming requests, or route traffic through a proxy that blocks internal or metadata‑service URLs

Generated by OpenCVE AI on September 22, 2026 at 20:12 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-5wf4-jqxh-8gm3 mcp-atlassian has an incomplete SSRF remediation
History

Tue, 22 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Sooperset
Sooperset mcp-atlassian
Vendors & Products Sooperset
Sooperset mcp-atlassian

Tue, 22 Sep 2026 18:00:00 +0000

Type Values Removed Values Added
Description MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by _process_authentication_headers and used to construct Atlassian fetchers without calling validate_url_for_ssrf. A caller who can set these headers can supply an internal or metadata-service URL and cause the server to send requests to that destination, bypassing the incomplete CVE-2026-27826 remediation. This issue is fixed in version 0.22.0.
Title mcp-atlassian has an incomplete SSRF remediation
Weaknesses CWE-918
References
Metrics cvssV4_0

{'score': 8.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N'}

Subscriptions

Sooperset Mcp-atlassian
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-09-22T17:52:25.730Z

Reserved: 2026-08-20T19:14:21.330Z

Link: CVE-2026-77267

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-22T18:17:18.803

Modified: 2026-09-22T18:17:18.803

Link: CVE-2026-77267

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-22T20:15:09Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)