sooperset/mcp-atlassian Security Advisories | GitStock

high2026-09-22

MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

GHSA-2xj6-xx86-cwwc · CVE-2026-77255

high2026-09-22

MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files

GHSA-vc25-24vv-fxxm · CVE-2026-77253

high2026-09-22

MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)

GHSA-w66g-j6c4-hcfc · CVE-2026-77251

high2026-09-22

MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

GHSA-wv8v-v4c5-v75j · CVE-2026-77246

high2026-09-22

MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport

GHSA-cc5h-2pwp-pvcc · CVE-2026-77248

high2026-07-10

mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment

GHSA-g5r6-gv6m-f5jv · CVE-2026-73498

high2026-07-10

mcp-atlassian: Arbitrary server-side file read via attachment upload

GHSA-wm45-qh3g-v83f

medium2026-07-10

MCP Atlassian: DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826)

GHSA-489g-7rxv-6c8q

critical2026-03-10

MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment

GHSA-xjgw-4wvw-rgm4 · CVE-2026-27825

high2026-03-10

MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers

GHSA-7r34-79r5-rcc9 · CVE-2026-27826