CVE-2026-77252

The MCP Atlassian Model Context Protocol server is vulnerable in versions prior to 0.22.0 due to an authentication bypass in how it handles project and space filters. Specifically, caller-supplied projects_filter and spaces_filter arguments can replace administrator-configured allowlists , while ...