{"schema_version":"2","view":"grouped","data":[{"id":3262,"cve_ids":["CVE-2026-77265"],"payload":{"kind":"advisory","title":"MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the hostname again for the connection. An unauthenticated caller can use a DNS-rebinding hostname that returns a public address during validation and an internal address during connection, causing requests to internal or metadata services. The advisory traces the vulnerable input and processing flow through X-Atlassian-Jira-Url, X-Atlassian-Confluence-Url, validate_url_for_ssrf, and DNS rebinding, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77265","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77265","aliases":["CVE-2026-77265"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-28T17:46:45.112Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-49xv-9743-pw8w","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77265","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:46:36.949461Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-49xv-9743-pw8w","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:46:45.112Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:47:58.553Z"}}},"related_cves":[{"value":"CVE-2026-77265","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:873ac0d8-f318-4cc1-aa9e-4f4b7685a3d0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77265","advisory_id":"873ac0d8-f318-4cc1-aa9e-4f4b7685a3d0","event_types":["advisory"],"published_at":"2026-10-24T21:32:02.691733+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:47:58.553+00:00","detail_url":"/advisories/advisory%3A873ac0d8-f318-4cc1-aa9e-4f4b7685a3d0","group":{"id":"advisory:873ac0d8-f318-4cc1-aa9e-4f4b7685a3d0","revision":1,"primary_event_id":3274,"change":"published","superseded_by":[],"changed":{"id":3274,"cve_ids":["CVE-2026-77265"],"payload":{"kind":"advisory","title":"MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the hostname again for the connection. An unauthenticated caller can use a DNS-rebinding hostname that returns a public address during validation and an internal address during connection, causing requests to internal or metadata services. The advisory traces the vulnerable input and processing flow through X-Atlassian-Jira-Url, X-Atlassian-Confluence-Url, validate_url_for_ssrf, and DNS rebinding, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77265","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77265","aliases":["CVE-2026-77265"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-28T17:46:45.112Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-49xv-9743-pw8w","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77265","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:46:36.949461Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-49xv-9743-pw8w","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:46:45.112Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:47:58.553Z"}}},"related_cves":[{"value":"CVE-2026-77265","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:873ac0d8-f318-4cc1-aa9e-4f4b7685a3d0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77265","advisory_id":"873ac0d8-f318-4cc1-aa9e-4f4b7685a3d0","event_types":["advisory"],"published_at":"2026-10-24T21:32:02.691733+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:47:58.553+00:00","detail_url":"/events/3274"},"members":[{"id":3274,"cve_ids":["CVE-2026-77265"],"payload":{"kind":"advisory","title":"MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the hostname again for the connection. An unauthenticated caller can use a DNS-rebinding hostname that returns a public address during validation and an internal address during connection, causing requests to internal or metadata services. The advisory traces the vulnerable input and processing flow through X-Atlassian-Jira-Url, X-Atlassian-Confluence-Url, validate_url_for_ssrf, and DNS rebinding, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77265","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77265","aliases":["CVE-2026-77265"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-28T17:46:45.112Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-49xv-9743-pw8w","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77265","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:46:36.949461Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-49xv-9743-pw8w","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:46:45.112Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:47:58.553Z"}}},"related_cves":[{"value":"CVE-2026-77265","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:873ac0d8-f318-4cc1-aa9e-4f4b7685a3d0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77265","advisory_id":"873ac0d8-f318-4cc1-aa9e-4f4b7685a3d0","event_types":["advisory"],"published_at":"2026-10-24T21:32:02.691733+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:47:58.553+00:00","detail_url":"/events/3274"}]}},{"id":3227,"cve_ids":["CVE-2026-77267"],"payload":{"kind":"advisory","title":"mcp-atlassian has an incomplete SSRF remediation","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by _process_authentication_headers and used to construct Atlassian fetchers without calling validate_url_for_ssrf. A caller who can set these headers can supply an internal or metadata-service URL and cause the server to send requests to that destination, bypassing the incomplete CVE-2026-27826 remediation. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77267","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77267","aliases":["CVE-2026-77267"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-28T17:18:50.679Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-5wf4-jqxh-8gm3","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77267","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:18:42.777642Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-5wf4-jqxh-8gm3","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:18:50.679Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:52:25.730Z"}}},"related_cves":[{"value":"CVE-2026-77267","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b3df484e-44d5-4cc1-aca4-83fd16d81f30","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77267","advisory_id":"b3df484e-44d5-4cc1-aca4-83fd16d81f30","event_types":["advisory"],"published_at":"2026-10-24T21:31:41.339248+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:52:25.73+00:00","detail_url":"/advisories/advisory%3Ab3df484e-44d5-4cc1-aca4-83fd16d81f30","group":{"id":"advisory:b3df484e-44d5-4cc1-aca4-83fd16d81f30","revision":1,"primary_event_id":3239,"change":"published","superseded_by":[],"changed":{"id":3239,"cve_ids":["CVE-2026-77267"],"payload":{"kind":"advisory","title":"mcp-atlassian has an incomplete SSRF remediation","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by _process_authentication_headers and used to construct Atlassian fetchers without calling validate_url_for_ssrf. A caller who can set these headers can supply an internal or metadata-service URL and cause the server to send requests to that destination, bypassing the incomplete CVE-2026-27826 remediation. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77267","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77267","aliases":["CVE-2026-77267"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-28T17:18:50.679Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-5wf4-jqxh-8gm3","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77267","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:18:42.777642Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-5wf4-jqxh-8gm3","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:18:50.679Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:52:25.730Z"}}},"related_cves":[{"value":"CVE-2026-77267","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b3df484e-44d5-4cc1-aca4-83fd16d81f30","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77267","advisory_id":"b3df484e-44d5-4cc1-aca4-83fd16d81f30","event_types":["advisory"],"published_at":"2026-10-24T21:31:41.339248+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:52:25.73+00:00","detail_url":"/events/3239"},"members":[{"id":3239,"cve_ids":["CVE-2026-77267"],"payload":{"kind":"advisory","title":"mcp-atlassian has an incomplete SSRF remediation","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by _process_authentication_headers and used to construct Atlassian fetchers without calling validate_url_for_ssrf. A caller who can set these headers can supply an internal or metadata-service URL and cause the server to send requests to that destination, bypassing the incomplete CVE-2026-27826 remediation. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77267","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77267","aliases":["CVE-2026-77267"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-28T17:18:50.679Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-5wf4-jqxh-8gm3","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77267","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:18:42.777642Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-5wf4-jqxh-8gm3","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:18:50.679Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:52:25.730Z"}}},"related_cves":[{"value":"CVE-2026-77267","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:b3df484e-44d5-4cc1-aca4-83fd16d81f30","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77267","advisory_id":"b3df484e-44d5-4cc1-aca4-83fd16d81f30","event_types":["advisory"],"published_at":"2026-10-24T21:31:41.339248+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:52:25.73+00:00","detail_url":"/events/3239"}]}},{"id":3225,"cve_ids":["CVE-2026-77262"],"payload":{"kind":"advisory","title":"MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of CVE-2026-27825)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment accepts an attacker-controlled file_path and does not apply the path restriction added for the earlier download vulnerability. A caller can traverse outside the workspace and upload arbitrary server-readable files to Confluence. The advisory traces the vulnerable input and processing flow through confluence_upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77262","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77262","aliases":["CVE-2026-77262"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-28T17:20:43.183Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-p6hp-93wp-fh6p","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77262","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:20:37.456237Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-p6hp-93wp-fh6p","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:20:43.183Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:13:10.332Z"}}},"related_cves":[{"value":"CVE-2026-77262","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:85648d11-23eb-48e5-ac66-f0175ffa5b22","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77262","advisory_id":"85648d11-23eb-48e5-ac66-f0175ffa5b22","event_types":["advisory"],"published_at":"2026-10-24T21:31:39.685251+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:13:10.332+00:00","detail_url":"/advisories/advisory%3A85648d11-23eb-48e5-ac66-f0175ffa5b22","group":{"id":"advisory:85648d11-23eb-48e5-ac66-f0175ffa5b22","revision":1,"primary_event_id":3237,"change":"published","superseded_by":[],"changed":{"id":3237,"cve_ids":["CVE-2026-77262"],"payload":{"kind":"advisory","title":"MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of CVE-2026-27825)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment accepts an attacker-controlled file_path and does not apply the path restriction added for the earlier download vulnerability. A caller can traverse outside the workspace and upload arbitrary server-readable files to Confluence. The advisory traces the vulnerable input and processing flow through confluence_upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77262","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77262","aliases":["CVE-2026-77262"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-28T17:20:43.183Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-p6hp-93wp-fh6p","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77262","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:20:37.456237Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-p6hp-93wp-fh6p","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:20:43.183Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:13:10.332Z"}}},"related_cves":[{"value":"CVE-2026-77262","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:85648d11-23eb-48e5-ac66-f0175ffa5b22","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77262","advisory_id":"85648d11-23eb-48e5-ac66-f0175ffa5b22","event_types":["advisory"],"published_at":"2026-10-24T21:31:39.685251+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:13:10.332+00:00","detail_url":"/events/3237"},"members":[{"id":3237,"cve_ids":["CVE-2026-77262"],"payload":{"kind":"advisory","title":"MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of CVE-2026-27825)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment accepts an attacker-controlled file_path and does not apply the path restriction added for the earlier download vulnerability. A caller can traverse outside the workspace and upload arbitrary server-readable files to Confluence. The advisory traces the vulnerable input and processing flow through confluence_upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77262","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77262","aliases":["CVE-2026-77262"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-28T17:20:43.183Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-p6hp-93wp-fh6p","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77262","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:20:37.456237Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-p6hp-93wp-fh6p","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:20:43.183Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:13:10.332Z"}}},"related_cves":[{"value":"CVE-2026-77262","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:85648d11-23eb-48e5-ac66-f0175ffa5b22","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77262","advisory_id":"85648d11-23eb-48e5-ac66-f0175ffa5b22","event_types":["advisory"],"published_at":"2026-10-24T21:31:39.685251+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:13:10.332+00:00","detail_url":"/events/3237"}]}},{"id":2339,"cve_ids":["CVE-2026-77269"],"payload":{"kind":"advisory","title":"MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the remediation for CVE-2026-27825 protects download destinations but does not constrain source paths used by attachment uploads. A caller can provide an absolute or traversal file_path and cause the server to upload the selected local file. The advisory traces the vulnerable input and processing flow through upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77269","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77269","aliases":["CVE-2026-77269"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-26T00:01:51.332Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-h7wj-5v37-59r2","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77269","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T00:01:26.801865Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-h7wj-5v37-59r2","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T00:01:51.332Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:32:14.168Z"}}},"related_cves":[{"value":"CVE-2026-77269","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aade6304-c8a7-4ae8-aca1-afd74fa96b1b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77269","advisory_id":"aade6304-c8a7-4ae8-aca1-afd74fa96b1b","event_types":["advisory"],"published_at":"2026-10-24T21:16:39.49658+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:32:14.168+00:00","detail_url":"/advisories/advisory%3Aaade6304-c8a7-4ae8-aca1-afd74fa96b1b","group":{"id":"advisory:aade6304-c8a7-4ae8-aca1-afd74fa96b1b","revision":1,"primary_event_id":2340,"change":"published","superseded_by":[],"changed":{"id":2340,"cve_ids":["CVE-2026-77269"],"payload":{"kind":"advisory","title":"MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the remediation for CVE-2026-27825 protects download destinations but does not constrain source paths used by attachment uploads. A caller can provide an absolute or traversal file_path and cause the server to upload the selected local file. The advisory traces the vulnerable input and processing flow through upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77269","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77269","aliases":["CVE-2026-77269"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-26T00:01:51.332Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-h7wj-5v37-59r2","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77269","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T00:01:26.801865Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-h7wj-5v37-59r2","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T00:01:51.332Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:32:14.168Z"}}},"related_cves":[{"value":"CVE-2026-77269","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aade6304-c8a7-4ae8-aca1-afd74fa96b1b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77269","advisory_id":"aade6304-c8a7-4ae8-aca1-afd74fa96b1b","event_types":["advisory"],"published_at":"2026-10-24T21:16:39.49658+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:32:14.168+00:00","detail_url":"/events/2340"},"members":[{"id":2340,"cve_ids":["CVE-2026-77269"],"payload":{"kind":"advisory","title":"MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the remediation for CVE-2026-27825 protects download destinations but does not constrain source paths used by attachment uploads. A caller can provide an absolute or traversal file_path and cause the server to upload the selected local file. The advisory traces the vulnerable input and processing flow through upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77269","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77269","aliases":["CVE-2026-77269"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-26T00:01:51.332Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-h7wj-5v37-59r2","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77269","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T00:01:26.801865Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-h7wj-5v37-59r2","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T00:01:51.332Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:32:14.168Z"}}},"related_cves":[{"value":"CVE-2026-77269","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aade6304-c8a7-4ae8-aca1-afd74fa96b1b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77269","advisory_id":"aade6304-c8a7-4ae8-aca1-afd74fa96b1b","event_types":["advisory"],"published_at":"2026-10-24T21:16:39.49658+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:32:14.168+00:00","detail_url":"/events/2340"}]}},{"id":2338,"cve_ids":["CVE-2026-77260"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementations accept an unconstrained file_path and open the referenced server-local file. A permitted MCP caller can upload sensitive host files to an Atlassian destination and then retrieve their contents. The advisory traces the vulnerable input and processing flow through upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77260","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77260","aliases":["CVE-2026-77260"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-25T23:59:28.621Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-f4p7-qx46-wc5j","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77260","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-25T23:58:59.191432Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-f4p7-qx46-wc5j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T23:59:28.621Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:03:03.077Z"}}},"related_cves":[{"value":"CVE-2026-77260","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ea3d194c-b108-42c1-ac35-a90ce106e343","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77260","advisory_id":"ea3d194c-b108-42c1-ac35-a90ce106e343","event_types":["advisory"],"published_at":"2026-10-24T21:16:38.693168+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:03:03.077+00:00","detail_url":"/advisories/advisory%3Aea3d194c-b108-42c1-ac35-a90ce106e343","group":{"id":"advisory:ea3d194c-b108-42c1-ac35-a90ce106e343","revision":1,"primary_event_id":2339,"change":"published","superseded_by":[],"changed":{"id":2339,"cve_ids":["CVE-2026-77260"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementations accept an unconstrained file_path and open the referenced server-local file. A permitted MCP caller can upload sensitive host files to an Atlassian destination and then retrieve their contents. The advisory traces the vulnerable input and processing flow through upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77260","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77260","aliases":["CVE-2026-77260"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-25T23:59:28.621Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-f4p7-qx46-wc5j","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77260","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-25T23:58:59.191432Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-f4p7-qx46-wc5j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T23:59:28.621Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:03:03.077Z"}}},"related_cves":[{"value":"CVE-2026-77260","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ea3d194c-b108-42c1-ac35-a90ce106e343","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77260","advisory_id":"ea3d194c-b108-42c1-ac35-a90ce106e343","event_types":["advisory"],"published_at":"2026-10-24T21:16:38.693168+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:03:03.077+00:00","detail_url":"/events/2339"},"members":[{"id":2339,"cve_ids":["CVE-2026-77260"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementations accept an unconstrained file_path and open the referenced server-local file. A permitted MCP caller can upload sensitive host files to an Atlassian destination and then retrieve their contents. The advisory traces the vulnerable input and processing flow through upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77260","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77260","aliases":["CVE-2026-77260"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-25T23:59:28.621Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-f4p7-qx46-wc5j","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77260","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-25T23:58:59.191432Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-f4p7-qx46-wc5j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T23:59:28.621Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:03:03.077Z"}}},"related_cves":[{"value":"CVE-2026-77260","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ea3d194c-b108-42c1-ac35-a90ce106e343","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77260","advisory_id":"ea3d194c-b108-42c1-ac35-a90ce106e343","event_types":["advisory"],"published_at":"2026-10-24T21:16:38.693168+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:03:03.077+00:00","detail_url":"/events/2339"}]}},{"id":2337,"cve_ids":["CVE-2026-77259"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment opens a caller-selected server-local file without checking that the resolved path remains in the workspace. A caller can upload environment files, credentials, or other readable host data to a Confluence page and retrieve it through Atlassian. The advisory traces the vulnerable input and processing flow through confluence_upload_attachment, file_path, and open(file_path, \"rb\"), which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77259","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77259","aliases":["CVE-2026-77259"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-26T00:04:12.132Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6cr4-ccf3-x7h4","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77259","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T00:03:38.818398Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6cr4-ccf3-x7h4","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T00:04:12.132Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:45:48.269Z"}}},"related_cves":[{"value":"CVE-2026-77259","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6083a2f5-ed46-4016-8a4a-25db58a15f42","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77259","advisory_id":"6083a2f5-ed46-4016-8a4a-25db58a15f42","event_types":["advisory"],"published_at":"2026-10-24T21:16:38.121909+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:45:48.269+00:00","detail_url":"/advisories/advisory%3A6083a2f5-ed46-4016-8a4a-25db58a15f42","group":{"id":"advisory:6083a2f5-ed46-4016-8a4a-25db58a15f42","revision":1,"primary_event_id":2338,"change":"published","superseded_by":[],"changed":{"id":2338,"cve_ids":["CVE-2026-77259"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment opens a caller-selected server-local file without checking that the resolved path remains in the workspace. A caller can upload environment files, credentials, or other readable host data to a Confluence page and retrieve it through Atlassian. The advisory traces the vulnerable input and processing flow through confluence_upload_attachment, file_path, and open(file_path, \"rb\"), which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77259","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77259","aliases":["CVE-2026-77259"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-26T00:04:12.132Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6cr4-ccf3-x7h4","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77259","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T00:03:38.818398Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6cr4-ccf3-x7h4","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T00:04:12.132Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:45:48.269Z"}}},"related_cves":[{"value":"CVE-2026-77259","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6083a2f5-ed46-4016-8a4a-25db58a15f42","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77259","advisory_id":"6083a2f5-ed46-4016-8a4a-25db58a15f42","event_types":["advisory"],"published_at":"2026-10-24T21:16:38.121909+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:45:48.269+00:00","detail_url":"/events/2338"},"members":[{"id":2338,"cve_ids":["CVE-2026-77259"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment opens a caller-selected server-local file without checking that the resolved path remains in the workspace. A caller can upload environment files, credentials, or other readable host data to a Confluence page and retrieve it through Atlassian. The advisory traces the vulnerable input and processing flow through confluence_upload_attachment, file_path, and open(file_path, \"rb\"), which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77259","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77259","aliases":["CVE-2026-77259"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-26T00:04:12.132Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6cr4-ccf3-x7h4","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77259","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T00:03:38.818398Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6cr4-ccf3-x7h4","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T00:04:12.132Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:45:48.269Z"}}},"related_cves":[{"value":"CVE-2026-77259","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6083a2f5-ed46-4016-8a4a-25db58a15f42","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77259","advisory_id":"6083a2f5-ed46-4016-8a4a-25db58a15f42","event_types":["advisory"],"published_at":"2026-10-24T21:16:38.121909+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:45:48.269+00:00","detail_url":"/events/2338"}]}},{"id":2334,"cve_ids":["CVE-2026-77255"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachments argument is converted into local paths and routed to the attachment upload implementation without workspace validation. A caller can make the MCP server read arbitrary local files and attach them to a Jira issue, using the server as a confused deputy to exfiltrate the contents. The advisory traces the vulnerable input and processing flow through jira update_issue, attachments, upload_attachment, and file_path, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77255","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77255","aliases":["CVE-2026-77255"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-26T00:00:47.513Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-2xj6-xx86-cwwc","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77255","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T00:00:16.341441Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-2xj6-xx86-cwwc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T00:00:47.513Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:29:20.167Z"}}},"related_cves":[{"value":"CVE-2026-77255","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:49a3c8c6-7410-4238-a221-62fa7d6a2cbb","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77255","advisory_id":"49a3c8c6-7410-4238-a221-62fa7d6a2cbb","event_types":["advisory"],"published_at":"2026-10-24T21:16:36.653385+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:29:20.167+00:00","detail_url":"/advisories/advisory%3A49a3c8c6-7410-4238-a221-62fa7d6a2cbb","group":{"id":"advisory:49a3c8c6-7410-4238-a221-62fa7d6a2cbb","revision":1,"primary_event_id":2336,"change":"published","superseded_by":[],"changed":{"id":2336,"cve_ids":["CVE-2026-77255"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachments argument is converted into local paths and routed to the attachment upload implementation without workspace validation. A caller can make the MCP server read arbitrary local files and attach them to a Jira issue, using the server as a confused deputy to exfiltrate the contents. The advisory traces the vulnerable input and processing flow through jira update_issue, attachments, upload_attachment, and file_path, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77255","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77255","aliases":["CVE-2026-77255"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-26T00:00:47.513Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-2xj6-xx86-cwwc","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77255","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T00:00:16.341441Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-2xj6-xx86-cwwc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T00:00:47.513Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:29:20.167Z"}}},"related_cves":[{"value":"CVE-2026-77255","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:49a3c8c6-7410-4238-a221-62fa7d6a2cbb","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77255","advisory_id":"49a3c8c6-7410-4238-a221-62fa7d6a2cbb","event_types":["advisory"],"published_at":"2026-10-24T21:16:36.653385+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:29:20.167+00:00","detail_url":"/events/2336"},"members":[{"id":2336,"cve_ids":["CVE-2026-77255"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachments argument is converted into local paths and routed to the attachment upload implementation without workspace validation. A caller can make the MCP server read arbitrary local files and attach them to a Jira issue, using the server as a confused deputy to exfiltrate the contents. The advisory traces the vulnerable input and processing flow through jira update_issue, attachments, upload_attachment, and file_path, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77255","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77255","aliases":["CVE-2026-77255"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-26T00:00:47.513Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-2xj6-xx86-cwwc","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77255","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T00:00:16.341441Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-2xj6-xx86-cwwc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T00:00:47.513Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:29:20.167Z"}}},"related_cves":[{"value":"CVE-2026-77255","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:49a3c8c6-7410-4238-a221-62fa7d6a2cbb","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77255","advisory_id":"49a3c8c6-7410-4238-a221-62fa7d6a2cbb","event_types":["advisory"],"published_at":"2026-10-24T21:16:36.653385+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:29:20.167+00:00","detail_url":"/events/2336"}]}},{"id":2326,"cve_ids":["CVE-2026-77251"],"payload":{"kind":"advisory","title":"MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira search accepts a forbidden project clause because it checks only for the presence of project syntax, Confluence search uses an incomplete case-sensitive space check, and Jira board APIs omit project-filter enforcement. These paths expose issues, boards, or pages outside JIRA_PROJECTS_FILTER or CONFLUENCE_SPACES_FILTER when the operator credentials have broader access. The advisory traces the vulnerable input and processing flow through jira_search, confluence_search, get_board_issues, get_agile_boards, JIRA_PROJECTS_FILTER, and CONFLUENCE_SPACES_FILTER, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77251","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77251","aliases":["CVE-2026-77251"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-25T23:56:50.778Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-w66g-j6c4-hcfc","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77251","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-25T23:56:09.407715Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-w66g-j6c4-hcfc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T23:56:50.778Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:55:37.810Z"}}},"related_cves":[{"value":"CVE-2026-77251","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e1356eee-b9c0-423e-af5d-933ac03e0bf7","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77251","advisory_id":"e1356eee-b9c0-423e-af5d-933ac03e0bf7","event_types":["advisory"],"published_at":"2026-10-24T21:16:31.136238+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:55:37.81+00:00","detail_url":"/advisories/advisory%3Ae1356eee-b9c0-423e-af5d-933ac03e0bf7","group":{"id":"advisory:e1356eee-b9c0-423e-af5d-933ac03e0bf7","revision":1,"primary_event_id":2328,"change":"published","superseded_by":[],"changed":{"id":2328,"cve_ids":["CVE-2026-77251"],"payload":{"kind":"advisory","title":"MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira search accepts a forbidden project clause because it checks only for the presence of project syntax, Confluence search uses an incomplete case-sensitive space check, and Jira board APIs omit project-filter enforcement. These paths expose issues, boards, or pages outside JIRA_PROJECTS_FILTER or CONFLUENCE_SPACES_FILTER when the operator credentials have broader access. The advisory traces the vulnerable input and processing flow through jira_search, confluence_search, get_board_issues, get_agile_boards, JIRA_PROJECTS_FILTER, and CONFLUENCE_SPACES_FILTER, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77251","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77251","aliases":["CVE-2026-77251"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-25T23:56:50.778Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-w66g-j6c4-hcfc","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77251","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-25T23:56:09.407715Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-w66g-j6c4-hcfc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T23:56:50.778Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:55:37.810Z"}}},"related_cves":[{"value":"CVE-2026-77251","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e1356eee-b9c0-423e-af5d-933ac03e0bf7","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77251","advisory_id":"e1356eee-b9c0-423e-af5d-933ac03e0bf7","event_types":["advisory"],"published_at":"2026-10-24T21:16:31.136238+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:55:37.81+00:00","detail_url":"/events/2328"},"members":[{"id":2328,"cve_ids":["CVE-2026-77251"],"payload":{"kind":"advisory","title":"MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira search accepts a forbidden project clause because it checks only for the presence of project syntax, Confluence search uses an incomplete case-sensitive space check, and Jira board APIs omit project-filter enforcement. These paths expose issues, boards, or pages outside JIRA_PROJECTS_FILTER or CONFLUENCE_SPACES_FILTER when the operator credentials have broader access. The advisory traces the vulnerable input and processing flow through jira_search, confluence_search, get_board_issues, get_agile_boards, JIRA_PROJECTS_FILTER, and CONFLUENCE_SPACES_FILTER, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77251","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77251","aliases":["CVE-2026-77251"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-25T23:56:50.778Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-w66g-j6c4-hcfc","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77251","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-25T23:56:09.407715Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-w66g-j6c4-hcfc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T23:56:50.778Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:55:37.810Z"}}},"related_cves":[{"value":"CVE-2026-77251","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e1356eee-b9c0-423e-af5d-933ac03e0bf7","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77251","advisory_id":"e1356eee-b9c0-423e-af5d-933ac03e0bf7","event_types":["advisory"],"published_at":"2026-10-24T21:16:31.136238+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:55:37.81+00:00","detail_url":"/events/2328"}]}},{"id":2321,"cve_ids":["CVE-2026-77258"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachments.py accepts a caller-controlled file_path and opens the selected server-local file without restricting it to the workspace. A permitted Confluence MCP caller can upload the file as an attachment and disclose data readable by the server process. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77258","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77258","aliases":["CVE-2026-77258"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-25T23:49:26.389Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-93xw-j965-9mx3","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77258","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-25T23:48:48.170129Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-93xw-j965-9mx3","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T23:49:26.389Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:39:28.501Z"}}},"related_cves":[{"value":"CVE-2026-77258","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:99c62c5b-5aa7-420a-8c2c-3a9d18fb7c9d","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77258","advisory_id":"99c62c5b-5aa7-420a-8c2c-3a9d18fb7c9d","event_types":["advisory"],"published_at":"2026-10-24T21:16:28.277827+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:39:28.501+00:00","detail_url":"/advisories/advisory%3A99c62c5b-5aa7-420a-8c2c-3a9d18fb7c9d","group":{"id":"advisory:99c62c5b-5aa7-420a-8c2c-3a9d18fb7c9d","revision":1,"primary_event_id":2323,"change":"published","superseded_by":[],"changed":{"id":2323,"cve_ids":["CVE-2026-77258"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachments.py accepts a caller-controlled file_path and opens the selected server-local file without restricting it to the workspace. A permitted Confluence MCP caller can upload the file as an attachment and disclose data readable by the server process. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77258","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77258","aliases":["CVE-2026-77258"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-25T23:49:26.389Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-93xw-j965-9mx3","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77258","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-25T23:48:48.170129Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-93xw-j965-9mx3","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T23:49:26.389Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:39:28.501Z"}}},"related_cves":[{"value":"CVE-2026-77258","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:99c62c5b-5aa7-420a-8c2c-3a9d18fb7c9d","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77258","advisory_id":"99c62c5b-5aa7-420a-8c2c-3a9d18fb7c9d","event_types":["advisory"],"published_at":"2026-10-24T21:16:28.277827+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:39:28.501+00:00","detail_url":"/events/2323"},"members":[{"id":2323,"cve_ids":["CVE-2026-77258"],"payload":{"kind":"advisory","title":"MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachments.py accepts a caller-controlled file_path and opens the selected server-local file without restricting it to the workspace. A permitted Confluence MCP caller can upload the file as an attachment and disclose data readable by the server process. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77258","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77258","aliases":["CVE-2026-77258"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-25T23:49:26.389Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-93xw-j965-9mx3","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77258","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-25T23:48:48.170129Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-93xw-j965-9mx3","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-25T23:49:26.389Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T17:39:28.501Z"}}},"related_cves":[{"value":"CVE-2026-77258","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:99c62c5b-5aa7-420a-8c2c-3a9d18fb7c9d","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77258","advisory_id":"99c62c5b-5aa7-420a-8c2c-3a9d18fb7c9d","event_types":["advisory"],"published_at":"2026-10-24T21:16:28.277827+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T17:39:28.501+00:00","detail_url":"/events/2323"}]}},{"id":1792,"cve_ids":["CVE-2026-77248"],"payload":{"kind":"advisory","title":"MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport accepts requests without a user identity and falls back to operator credentials, while upload_attachment accepts an unrestricted file_path. An unauthenticated network caller can read files available to the MCP process, upload them to an attacker-selected Jira issue or Confluence page, and retrieve the contents. The advisory traces the vulnerable input and processing flow through streamable-http, UserTokenMiddleware, upload_attachment, file_path, and _get_fetcher, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77248","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77248","aliases":["CVE-2026-77248"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-24T15:23:30.599Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-cc5h-2pwp-pvcc","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77248","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T15:23:22.839643Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-cc5h-2pwp-pvcc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T15:23:30.599Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:49:57.295Z"}}},"related_cves":[{"value":"CVE-2026-77248","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6975437c-9b5f-4268-9d5e-979e3402fa49","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77248","advisory_id":"6975437c-9b5f-4268-9d5e-979e3402fa49","event_types":["advisory"],"published_at":"2026-10-24T21:07:49.382752+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:49:57.295+00:00","detail_url":"/advisories/advisory%3A6975437c-9b5f-4268-9d5e-979e3402fa49","group":{"id":"advisory:6975437c-9b5f-4268-9d5e-979e3402fa49","revision":1,"primary_event_id":1778,"change":"published","superseded_by":[],"changed":{"id":1778,"cve_ids":["CVE-2026-77248"],"payload":{"kind":"advisory","title":"MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport accepts requests without a user identity and falls back to operator credentials, while upload_attachment accepts an unrestricted file_path. An unauthenticated network caller can read files available to the MCP process, upload them to an attacker-selected Jira issue or Confluence page, and retrieve the contents. The advisory traces the vulnerable input and processing flow through streamable-http, UserTokenMiddleware, upload_attachment, file_path, and _get_fetcher, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77248","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77248","aliases":["CVE-2026-77248"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-24T15:23:30.599Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-cc5h-2pwp-pvcc","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77248","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T15:23:22.839643Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-cc5h-2pwp-pvcc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T15:23:30.599Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:49:57.295Z"}}},"related_cves":[{"value":"CVE-2026-77248","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6975437c-9b5f-4268-9d5e-979e3402fa49","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77248","advisory_id":"6975437c-9b5f-4268-9d5e-979e3402fa49","event_types":["advisory"],"published_at":"2026-10-24T21:07:49.382752+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:49:57.295+00:00","detail_url":"/events/1778"},"members":[{"id":1778,"cve_ids":["CVE-2026-77248"],"payload":{"kind":"advisory","title":"MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport accepts requests without a user identity and falls back to operator credentials, while upload_attachment accepts an unrestricted file_path. An unauthenticated network caller can read files available to the MCP process, upload them to an attacker-selected Jira issue or Confluence page, and retrieve the contents. The advisory traces the vulnerable input and processing flow through streamable-http, UserTokenMiddleware, upload_attachment, file_path, and _get_fetcher, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77248","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77248","aliases":["CVE-2026-77248"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-24T15:23:30.599Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-cc5h-2pwp-pvcc","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77248","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T15:23:22.839643Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-cc5h-2pwp-pvcc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T15:23:30.599Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:49:57.295Z"}}},"related_cves":[{"value":"CVE-2026-77248","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6975437c-9b5f-4268-9d5e-979e3402fa49","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77248","advisory_id":"6975437c-9b5f-4268-9d5e-979e3402fa49","event_types":["advisory"],"published_at":"2026-10-24T21:07:49.382752+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:49:57.295+00:00","detail_url":"/events/1778"}]}},{"id":1791,"cve_ids":["CVE-2026-77246"],"payload":{"kind":"advisory","title":"MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an Authorization identity and permits attacker-controlled Atlassian service headers, including X-Atlassian-Confluence-Url, to select a public attacker hostname or one allowed by MCP_ALLOWED_URL_DOMAINS. A caller can then invoke confluence_upload_attachment or the Jira attachment variant in src/mcp_atlassian/jira/attachments.py with a server-local file_path and cause the MCP process to send the file to the selected attachment endpoint. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77246","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77246","aliases":["CVE-2026-77246"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.4,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-24T15:26:33.550Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wv8v-v4c5-v75j","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77246","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T15:26:25.494462Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wv8v-v4c5-v75j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T15:26:33.550Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:51:54.540Z"}}},"related_cves":[{"value":"CVE-2026-77246","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0f9ec106-2fbc-44a6-b7f9-0625508b5271","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77246","advisory_id":"0f9ec106-2fbc-44a6-b7f9-0625508b5271","event_types":["advisory"],"published_at":"2026-10-24T21:07:48.603788+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:51:54.54+00:00","detail_url":"/advisories/advisory%3A0f9ec106-2fbc-44a6-b7f9-0625508b5271","group":{"id":"advisory:0f9ec106-2fbc-44a6-b7f9-0625508b5271","revision":1,"primary_event_id":1777,"change":"published","superseded_by":[],"changed":{"id":1777,"cve_ids":["CVE-2026-77246"],"payload":{"kind":"advisory","title":"MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an Authorization identity and permits attacker-controlled Atlassian service headers, including X-Atlassian-Confluence-Url, to select a public attacker hostname or one allowed by MCP_ALLOWED_URL_DOMAINS. A caller can then invoke confluence_upload_attachment or the Jira attachment variant in src/mcp_atlassian/jira/attachments.py with a server-local file_path and cause the MCP process to send the file to the selected attachment endpoint. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77246","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77246","aliases":["CVE-2026-77246"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.4,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-24T15:26:33.550Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wv8v-v4c5-v75j","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77246","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T15:26:25.494462Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wv8v-v4c5-v75j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T15:26:33.550Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:51:54.540Z"}}},"related_cves":[{"value":"CVE-2026-77246","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0f9ec106-2fbc-44a6-b7f9-0625508b5271","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77246","advisory_id":"0f9ec106-2fbc-44a6-b7f9-0625508b5271","event_types":["advisory"],"published_at":"2026-10-24T21:07:48.603788+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:51:54.54+00:00","detail_url":"/events/1777"},"members":[{"id":1777,"cve_ids":["CVE-2026-77246"],"payload":{"kind":"advisory","title":"MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an Authorization identity and permits attacker-controlled Atlassian service headers, including X-Atlassian-Confluence-Url, to select a public attacker hostname or one allowed by MCP_ALLOWED_URL_DOMAINS. A caller can then invoke confluence_upload_attachment or the Jira attachment variant in src/mcp_atlassian/jira/attachments.py with a server-local file_path and cause the MCP process to send the file to the selected attachment endpoint. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77246","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77246","aliases":["CVE-2026-77246"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.4,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-24T15:26:33.550Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wv8v-v4c5-v75j","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77246","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T15:26:25.494462Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wv8v-v4c5-v75j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T15:26:33.550Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:51:54.540Z"}}},"related_cves":[{"value":"CVE-2026-77246","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0f9ec106-2fbc-44a6-b7f9-0625508b5271","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77246","advisory_id":"0f9ec106-2fbc-44a6-b7f9-0625508b5271","event_types":["advisory"],"published_at":"2026-10-24T21:07:48.603788+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:51:54.54+00:00","detail_url":"/events/1777"}]}},{"id":995,"cve_ids":["CVE-2026-77271"],"payload":{"kind":"advisory","title":"MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of CVE-2026-27825)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call sites omit base_dir, allowing attacker-selected writes within the working directory. This Python module overwrite can provide code execution when the application later imports the modified module, bypassing the remediation tracked as CVE-2026-27825. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77271","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77271","aliases":["CVE-2026-77271"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-24T14:28:01.020Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6vmq-24h2-pj7j","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77271","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T14:27:52.995265Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6vmq-24h2-pj7j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T14:28:01.020Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:00:33.694Z"}}},"related_cves":[{"value":"CVE-2026-77271","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f80bb5ad-b465-4d95-b018-fe74db76c7f0","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77271","advisory_id":"f80bb5ad-b465-4d95-b018-fe74db76c7f0","event_types":["advisory"],"published_at":"2026-10-24T20:54:37.37723+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:00:33.694+00:00","detail_url":"/advisories/advisory%3Af80bb5ad-b465-4d95-b018-fe74db76c7f0","group":{"id":"advisory:f80bb5ad-b465-4d95-b018-fe74db76c7f0","revision":1,"primary_event_id":989,"change":"published","superseded_by":[],"changed":{"id":989,"cve_ids":["CVE-2026-77271"],"payload":{"kind":"advisory","title":"MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of CVE-2026-27825)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call sites omit base_dir, allowing attacker-selected writes within the working directory. This Python module overwrite can provide code execution when the application later imports the modified module, bypassing the remediation tracked as CVE-2026-27825. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77271","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77271","aliases":["CVE-2026-77271"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-24T14:28:01.020Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6vmq-24h2-pj7j","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77271","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T14:27:52.995265Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6vmq-24h2-pj7j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T14:28:01.020Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:00:33.694Z"}}},"related_cves":[{"value":"CVE-2026-77271","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f80bb5ad-b465-4d95-b018-fe74db76c7f0","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77271","advisory_id":"f80bb5ad-b465-4d95-b018-fe74db76c7f0","event_types":["advisory"],"published_at":"2026-10-24T20:54:37.37723+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:00:33.694+00:00","detail_url":"/events/989"},"members":[{"id":989,"cve_ids":["CVE-2026-77271"],"payload":{"kind":"advisory","title":"MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of CVE-2026-27825)","summary":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call sites omit base_dir, allowing attacker-selected writes within the working directory. This Python module overwrite can provide code execution when the application later imports the modified module, bypassing the remediation tracked as CVE-2026-27825. This issue is fixed in version 0.22.0.","evidence":"cve:CVE-2026-77271","products":[{"name":{"value":"mcp-atlassian","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77271","aliases":["CVE-2026-77271"],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","subIntegrityImpact":"NONE","vulnIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"vendor":"sooperset","product":"mcp-atlassian","versions":[{"status":"affected","version":"< 0.22.0"}]}],"modified":"2026-09-24T14:28:01.020Z","provider":"cve","references":["https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6vmq-24h2-pj7j","https://github.com/sooperset/mcp-atlassian/pull/1448","https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460","https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77271","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T14:27:52.995265Z"}}}],"references":[{"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6vmq-24h2-pj7j","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T14:28:01.020Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-22T18:00:33.694Z"}}},"related_cves":[{"value":"CVE-2026-77271","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:f80bb5ad-b465-4d95-b018-fe74db76c7f0","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77271","advisory_id":"f80bb5ad-b465-4d95-b018-fe74db76c7f0","event_types":["advisory"],"published_at":"2026-10-24T20:54:37.37723+00:00","technologies":["core-cve","mcp-atlassian"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-22T18:00:33.694+00:00","detail_url":"/events/989"}]}}],"next_after":3262,"next_before":995}