CVE-2026-77252 MCP Atlassian: JIRA_PROJECTS_FILTER and CONFLUENCE_SPACES_FILTER can be bypassed in search tools

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, caller-supplied projectsfilter and spacesfilter arguments can replace administrator-configured allowlists, and caller-provided project or space clauses can suppress the configured...

PT-2026-96927

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description Caller-supplied projects filter and spaces filter arguments can override administrator-configured allowlists. Additionally, caller-provided project or space clauses can suppress configured...