CVE-2026-77271

EUVD-2026-84629

22.09.2026, 18:17

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call sites omit base_dir, allowing attacker-selected writes within the working directory. This Python module overwrite can provide code execution when the application later imports the modified module, bypassing the remediation tracked as CVE-2026-27825. This issue is fixed in version 0.22.0.

Path Traversal

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 48.68%

Affected Products (NVD)

Vendor	Product	Version
mcp-atlassian	mcp_atlassian	𝑥 < 0.22.0

𝑥

= Vulnerable software versions

Known Exploits!

Common Weakness Enumeration

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References

https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460

https://github.com/sooperset/mcp-atlassian/pull/1448

https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0

https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-6vmq-24h2-pj7j