174 matches found
CVE-2026-77256 MCP Atlassian: OAuth refresh-token backup file is world-readable under default Unix umask
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the plaintext OAuth fallback file containing refresh and access tokens is written with permissions inherited from the process umask. Under common or permissive configurations, other...
8.3CVSS5.8AI score
SaveExploits0References6
20