CVE-2026-77253: MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files
MCP Atlassian exposes Jira and Confluence attachment upload tools that accept arbitrary local filesystem paths and upload those file contents to Atlassian. In HTTP or multi-user deployments, an MCP caller who can invoke write tools can cause the server to read any file accessible to the MCP process and send it to Jira/Confluence as an attachment.
References
- github.com/advisories/GHSA-vc25-24vv-fxxm
- github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460
- github.com/sooperset/mcp-atlassian/pull/1448
- github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0
- github.com/sooperset/mcp-atlassian/security/advisories/GHSA-vc25-24vv-fxxm
- nvd.nist.gov/vuln/detail/CVE-2026-77253
Code Behaviors & Features
Detect and mitigate CVE-2026-77253 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →