CVE-2026-77255

Description

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachments argument is converted into local paths and routed to the attachment upload implementation without workspace validation. A caller can make the MCP server read arbitrary local files and attach them to a Jira issue, using the server as a confused deputy to exfiltrate the contents. The advisory traces the vulnerable input and processing flow through jira update_issue, attachments, upload_attachment, and file_path, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.

Traduire en français

Produits concernés

• sooperset mcp-atlassian
• Mcp-atlassian mcp atlassian

Scores CVSS

Faiblesses (CWE)

• CWE-22
• CWE-441

Références

• https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460 Patch
• https://github.com/sooperset/mcp-atlassian/pull/1448 Issue TrackingPatch
• https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0 Release Notes
• https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-2xj6-xx86-cwwc ExploitVendor Advisory
• https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-2xj6-xx86-cwwc ExploitVendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories