PT-2026-96900

Name of the Vulnerable Software and Affected Versions mcp-atlassian versions prior to 0.22.0 Description The HTTP transport in mcp-atlassian accepts requests without a verified user identity. When no valid user token is provided, the system falls back to using the operator's globally configured...

PT-2026-96904

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description A backslash authority confusion exists in the header-based Jira and Confluence URL authentication flow. The validate url for ssrf function interprets the authority of a URL differently than th...

PT-2026-96945

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description Jira and Confluence attachment upload tools accept arbitrary local filesystem paths and send the selected bytes to Atlassian. In HTTP or multi-user deployments, a caller can cross the...

PT-2026-96926

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description Three distinct issues allow attacker-controlled queries to access content from forbidden projects or spaces, bypassing the restrictions set by the JIRA PROJECTS FILTER and CONFLUENCE SPACES...

CVE-2026-77267: Server-Side Request Forgery (SSRF)

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by processauthenticationheaders and used to construct Atlassian fetchers without calling...

PT-2026-96952

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description The upload attachment function in both the Jira and Confluence modules fails to constrain the resolved path to the server workspace, allowing the use of absolute paths and traversal sequences...

CVE-2026-77274: Server-Side Request Forgery (SSRF)

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, validateurlforssrf has a backslash authority confusion because it interprets the authority differently from the Requests connection layer in the header-based Jira and Confluence URL...

PT-2026-96903

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description The Jira and Confluence attachment upload tools fail to validate file paths, allowing for path traversal. An authenticated MCP client or an AI assistant manipulated via prompt injection can...

PT-2026-96950

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description Missing path validation in the confluence upload attachment function allows an authenticated client to read arbitrary files from the server filesystem and exfiltrate their contents to a...

CVE-2026-77252: Improper Access Control

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, caller-supplied projectsfilter and spacesfilter arguments can replace administrator-configured allowlists, and caller-provided project or space clauses can suppress the configured...

PT-2026-96930

Name of the Vulnerable Software and Affected Versions mcp-atlassian versions prior to 0.22.0 Description The UserTokenMiddleware extracts URLs from the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url HTTP headers and passes them to API client constructors without validation. Specifically, the...

CVE-2026-77265: Server-Side Request Forgery (SSRF)

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the hostname again for the connection. An unauthenticated caller can use a...

PT-2026-96902

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description An unauthenticated caller can perform a Server-Side Request Forgery SSRF attack using a DNS-rebinding technique. The software employs a validate-then-use pattern where the validate url for ssr...

CVE-2026-77271: Improper Limitation of a Pathname to a Restricted Directory

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, validatesafepath defaults its base directory to os.getcwd, and affected Confluence attachment call sites omit basedir, allowing attacker-selected writes within the working directory...

CVE-2026-77244: Improper Authentication

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the HTTP transport accepts requests without a verified user identity and downstream fetcher construction falls back to the operator's globally configured Jira or Confluence credential...

PT-2026-96931

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions 0.17.0 through 0.21.0 Description An incomplete path traversal fix allows attacker-selected writes within the working directory. The function validate safe path defaults its base dir to the current working directory...

CVE-2026-77249: Server-Side Request Forgery (SSRF)

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, JiraUserMixin.lookupuserbypermissions uses the module-level requests.get function instead of the fetcher's protected session. A caller-controlled public Jira URL can redirect that...

PT-2026-96951

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions 0.17.0 through 0.21.0 Description A path traversal issue exists in the confluence upload attachment tool. The file path variable is passed directly to the open function without proper validation, allowing a caller to rea...

CVE-2026-77255: Improper Limitation of a Pathname to a Restricted Directory

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Jira updateissue attachments argument is converted into local paths and routed to the attachment upload implementation without workspace validation. A caller can make the MCP serv...

CVE-2026-77247: External Control of File Name or Path

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, Jira and Confluence upload tools interpret caller-controlled path arguments on the MCP server and open those files before sending them as attachments. In remote or multi-user...