CVE-2026-77259: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in sooperset mcp-atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment opens a caller-selected server-local file without checking that the resolved path remains in the workspace. A caller can upload environment files, credentials, or other readable host data to a Confluence page and retrieve it through Atlassian. The advisory traces the vulnerable input and processing flow through confluence_upload_attachment, file_path, and open(file_path, "rb"), which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
AI Analysis
Technical Summary
MCP Atlassian versions before 0.22.0 contain a path traversal vulnerability (CWE-22) in the confluence_upload_attachment function. The function opens a user-supplied file path without verifying that the resolved path remains within the intended workspace directory. This improper limitation of pathname allows an attacker with limited privileges to upload arbitrary files from the server's local filesystem to a Confluence page, potentially exposing sensitive host data. The vulnerability is addressed by adding proper path validation in version 0.22.0.
Potential Impact
An attacker with limited privileges can exploit this vulnerability to upload arbitrary local files from the server to Confluence pages, leading to disclosure of sensitive information such as environment files and credentials. The vulnerability does not allow code execution or denial of service but results in high confidentiality impact. Integrity and availability are not affected.
Mitigation Recommendations
Upgrade MCP Atlassian to version 0.22.0 or later, where the path traversal vulnerability is fixed by proper validation of file paths in confluence_upload_attachment. No other mitigations are indicated by the vendor advisory.
CVE-2026-77259: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in sooperset mcp-atlassian
Description
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment opens a caller-selected server-local file without checking that the resolved path remains in the workspace. A caller can upload environment files, credentials, or other readable host data to a Confluence page and retrieve it through Atlassian. The advisory traces the vulnerable input and processing flow through confluence_upload_attachment, file_path, and open(file_path, "rb"), which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
CVSS v3.1
Score 7.7high
Affected software
sooperset
mcp-atlassian
pkg:github/sooperset/mcp-atlassianRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
MCP Atlassian versions before 0.22.0 contain a path traversal vulnerability (CWE-22) in the confluence_upload_attachment function. The function opens a user-supplied file path without verifying that the resolved path remains within the intended workspace directory. This improper limitation of pathname allows an attacker with limited privileges to upload arbitrary files from the server's local filesystem to a Confluence page, potentially exposing sensitive host data. The vulnerability is addressed by adding proper path validation in version 0.22.0.
Potential Impact
An attacker with limited privileges can exploit this vulnerability to upload arbitrary local files from the server to Confluence pages, leading to disclosure of sensitive information such as environment files and credentials. The vulnerability does not allow code execution or denial of service but results in high confidentiality impact. Integrity and availability are not affected.
Mitigation Recommendations
Upgrade MCP Atlassian to version 0.22.0 or later, where the path traversal vulnerability is fixed by proper validation of file paths in confluence_upload_attachment. No other mitigations are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-08-20T19:02:23.417Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ab2d108f7a7c541069ead05
Added to database: 09/22/2026, 19:03:36 UTC
Last enriched: 09/22/2026, 19:17:47 UTC
Last updated: 09/23/2026, 01:58:06 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.