CyberRota Analysis
AI-GeneratedThe MCP Atlassian server for Confluence and Jira is vulnerable due to improperly set permissions on the OAuth fallback token directory and JSON file, allowing local users or processes to access sensitive access and refresh tokens. This exposure can lead to unauthorized reuse of Atlassian sessions, potentially compromising user accounts. Organizations using versions prior to 0.22.0 should prioritize upgrading to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth fallback token directory and JSON file are created without explicit owner-only modes. Local users or processes with access through the resulting group or world permission bits can read access and refresh tokens and reuse the associated Atlassian session. The advisory traces the vulnerable input and processing flow through ~/.mcp-atlassian, oauth-<client_id>.json, access_token, and refresh_token, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)