CVE-2026-77258: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in sooperset mcp-atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachments.py accepts a caller-controlled file_path and opens the selected server-local file without restricting it to the workspace. A permitted Confluence MCP caller can upload the file as an attachment and disclose data readable by the server process. This issue is fixed in version 0.22.0.
AI Analysis
Technical Summary
MCP Atlassian versions before 0.22.0 contain a CWE-22 path traversal vulnerability in the upload_attachment function located in src/mcp_atlassian/confluence/attachments.py. The function accepts a file_path parameter controlled by the caller and opens the specified file on the server without restricting the path to the intended workspace directory. This allows an authorized Confluence MCP caller to upload arbitrary files as attachments, potentially disclosing sensitive data accessible to the server process. The vulnerability has a CVSS 3.1 score of 7.7, indicating high severity, and is resolved in version 0.22.0.
Potential Impact
An attacker with Confluence MCP caller permissions can exploit this vulnerability to upload arbitrary files from the server's local filesystem as attachments, leading to unauthorized disclosure of sensitive data readable by the server process. The vulnerability does not impact integrity or availability but has a high confidentiality impact.
Mitigation Recommendations
Upgrade MCP Atlassian to version 0.22.0 or later, where this path traversal vulnerability is fixed. No other mitigations are specified or required.
CVE-2026-77258: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in sooperset mcp-atlassian
Description
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachments.py accepts a caller-controlled file_path and opens the selected server-local file without restricting it to the workspace. A permitted Confluence MCP caller can upload the file as an attachment and disclose data readable by the server process. This issue is fixed in version 0.22.0.
CVSS v3.1
Score 7.7high
Affected software
sooperset
mcp-atlassian
pkg:github/sooperset/mcp-atlassianRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
MCP Atlassian versions before 0.22.0 contain a CWE-22 path traversal vulnerability in the upload_attachment function located in src/mcp_atlassian/confluence/attachments.py. The function accepts a file_path parameter controlled by the caller and opens the specified file on the server without restricting the path to the intended workspace directory. This allows an authorized Confluence MCP caller to upload arbitrary files as attachments, potentially disclosing sensitive data accessible to the server process. The vulnerability has a CVSS 3.1 score of 7.7, indicating high severity, and is resolved in version 0.22.0.
Potential Impact
An attacker with Confluence MCP caller permissions can exploit this vulnerability to upload arbitrary files from the server's local filesystem as attachments, leading to unauthorized disclosure of sensitive data readable by the server process. The vulnerability does not impact integrity or availability but has a high confidentiality impact.
Mitigation Recommendations
Upgrade MCP Atlassian to version 0.22.0 or later, where this path traversal vulnerability is fixed. No other mitigations are specified or required.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-08-20T19:02:23.417Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ab2bf66f7a7c541068722f7
Added to database: 09/22/2026, 17:48:22 UTC
Last enriched: 09/22/2026, 18:03:25 UTC
Last updated: 09/23/2026, 01:58:06 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.