Skip to content
OpenAdvisories

Vendor

sooperset

35 known vulnerabilities.

Products

mcp-atlassian 35
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-27825 Public exploit EPSS 12%

    MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment

    MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, the `confluence_download_attachment` MCP tool accepts a `download_path` parameter that is written to without any directory boundary e…

    sooperset mcp-atlassian mcp-atlassian PyPI