Read the docs
TI-2026-53953 Aliases CVE-2026-77269GHSA-h7wj-5v37-59r2

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)

Priority MEDIUM 62CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-22 and the CVSS impact.

Summary

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the remediation for CVE-2026-27825 protects download destinations but does not constrain source paths used by attachment uploads. A caller can provide an absolute or traversal file_path and cause the server to upload the selected local file. The advisory traces the vulnerable input and processing flow through upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0043 37th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed mcp-atlassian (sooperset): 0.22.0mcp-atlassian (PyPI): 0.22.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
soopersetmcp-atlassianbefore 0.22.00.22.0Patch availableCNA
—mcp-atlassian (PyPI)before 0.22.00.22.0Patch availableGHSA-h7wj-5v37-59r2
  • mcp-atlassian Vendorsooperset Affected before 0.22.0 Fixed in 0.22.0 Patch available CNA
  • mcp-atlassian (PyPI) Vendor— Affected before 0.22.0 Fixed in 0.22.0 Patch available GHSA-h7wj-5v37-59r2

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcp-atlassian:mcp_atlassian:*:*:*:*:*:*:*:*before 0.22.0VulnerableMcp-atlassian
  • cpe:2.3:a:mcp-atlassian:mcp_atlassian:*:*:*:*:*:*:*:* Versions before 0.22.0 Vulnerable ·Mcp-atlassian

Remediation

  • Fix · CNA mcp-atlassian (sooperset) Fixed in 0.22.0
  • Fix · GHSA-h7wj-5v37-59r2 mcp-atlassian (PyPI) Fixed in 0.22.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-77269
  2. 2026-10-03 Alias added: GHSA-h7wj-5v37-59r2

References

Exploit 1

Patch 2

Other 2

  • TI-2026-53938 MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials CVSS 3.1CRITICAL 9.1
  • TI-2026-53957 MCP Atlassian: SSRF Protection Bypass CVSS 4.0HIGH 8.8
  • TI-2026-53935 Protection mechanism failure in sooperset mcp-atlassian CVSS 4.0HIGH 8.3
  • TI-2026-53946 Path traversal in sooperset mcp-atlassian CVSS 3.1HIGH 8.6
  • TI-2026-53932 Path traversal in sooperset mcp-atlassian CVSS 3.1HIGH 8.6
  • TI-2026-22177 Path traversal in sooperset mcp-atlassian CVSS 3.1CRITICAL 9.1
See all 33 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences