Skip to content
OpenAdvisories
High · 8.6 Public exploit CVE-2026-77262 EUVD-2026-84744GHSA-p6hp-93wp-fh6pPYSEC-2026-4099

MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of CVE-2026-27825)

Published Sep 22, 2026 · Updated Sep 28, 2026 · Assigned by GitHub_M

Vendor: sooperset Product: mcp-atlassian Package: mcp-atlassian Ecosystem: PyPI

Description

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment accepts an attacker-controlled file_path and does not apply the path restriction added for the earlier download vulnerability. A caller can traverse outside the workspace and upload arbitrary server-readable files to Confluence. The advisory traces the vulnerable input and processing flow through confluence_upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.

Affected products

VendorProductAffectedFixed
sooperset mcp-atlassian < 0.22.0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • romain-deperne/CVE-2026-77262 ★ 0 · Apr 29, 2026

    Arbitrary file read in mcp-atlassian via confluence_upload_attachment — CVE-2026-77262 / GHSA-p6hp-93wp-fh6p

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI mcp-atlassian < 0.22.0 0.22.0 GHSA-p6hp-93wp-fh6p

References