CyberRota Analysis
AI-GeneratedThe MCP Atlassian server for Confluence and Jira is vulnerable to improper validation of file paths used in attachment uploads, allowing attackers to exploit this flaw to upload arbitrary local files. This could lead to unauthorized access to sensitive data or further exploitation of the server. Organizations using versions prior to 0.22.0 should prioritize upgrading to mitigate potential risks associated with this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the remediation for CVE-2026-27825 protects download destinations but does not constrain source paths used by attachment uploads. A caller can provide an absolute or traversal file_path and cause the server to upload the selected local file. The advisory traces the vulnerable input and processing flow through upload_attachment, file_path, and CVE-2026-27825, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)