CVE-2026-73496 Details
Description
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the confluence_upload_attachment and confluence_upload_attachments tools pass a client-controlled file_path through src/mcp_atlassian/confluence/attachments.py upload_attachment, and the jira_update_issue attachments parameter reaches src/mcp_atlassian/jira/attachments.py upload_attachment, without confining either path to an approved server workspace. In a remote HTTP, SSE, or multi-user deployment, absolute or traversing paths are resolved on the MCP server and uploaded to Atlassian, allowing a client with write-tool access to disclose server files, environment-held Atlassian credentials, or another tenant's data. A local single-user stdio deployment does not cross this trust boundary because the server runs in the caller's environment. This issue is fixed in version 0.22.0.
A vulnerability in MCP Atlassian's Model Context Protocol server for Confluence and Jira, prior to version 0.22.0, allows clients to read arbitrary files from the server's filesystem and exfiltrate them as Atlassian attachments. This issue arises because the 'confluence_upload_attachment' and 'confluence_upload_attachments' tools, as well as the 'jira_update_issue' attachments parameter, pass client-controlled file paths to the server without proper validation. In remote HTTP, SSE, or multi-user deployments, these paths can traverse directories and access sensitive files, including environment-held Atlassian credentials and data from other tenants. The vulnerability does not exist in local single-user stdio deployments, where the server operates in the user's environment.
Users are advised to update to MCP Atlassian version 0.22.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 14, 2026CISA-ADP
Assessed Sep 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wm45-qh3g-v83f | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460 | [email protected] | Source CodeVendor |
| https://github.com/sooperset/mcp-atlassian/pull/1448 | [email protected] | Issue TrackingVendor |
| https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0 | [email protected] | Release NotesVendor |
| https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wm45-qh3g-v83f | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-73 | External Control of File Name or Path | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| MCP Atlassian | < 0.22.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 16, 2026 | CVE Modified | CISA-ADP |
| Sep 14, 2026 | New CVE Received | [email protected] |