CyberRota Analysis
AI-GeneratedThe vulnerability affects the MCP server for Atlassian products, specifically in the file upload functionality of Jira and Confluence, which improperly handles user-supplied file paths. This flaw allows a remote attacker with tool access to read sensitive local files on the server and upload them as attachments, potentially leading to data exposure. Organizations using affected versions prior to 0.22.0 should prioritize patching to mitigate the risk of unauthorized data access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided file_path to local file operations without restricting it to the workspace. A remote MCP caller with tool access can cause the server to read sensitive local files and upload them as Atlassian attachments. The advisory traces the vulnerable input and processing flow through streamable-http, upload_attachment, and file_path, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)