CVE-2026-73498

Received Received - Intake

Path Traversal in MCP Atlassian Server

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: GitHub, Inc.

Description

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment passes its client-supplied file_path directly to open(file_path, "rb") in src/mcp_atlassian/confluence/attachments.py through _upload_attachment_direct() without calling validate_safe_path. An authenticated MCP client can read any file accessible to the server process and exfiltrate it to Confluence as an attachment. If an AI agent can be induced to call the tool through untrusted content, the same flaw can disclose server environment variables such as CONFLUENCE_API_TOKEN and other credentials. This issue is fixed in version 0.22.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-12

Generated

2026-08-13

AI Q&A

2026-08-13

EPSS Evaluated

N/A

NVD

CVE-2026-73498

Affected Vendors & Products

Vendor	Product	Version / Range
atlassian	confluence	to 0.22.0 (exc)
atlassian	jira	to 0.22.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability exists in MCP Atlassian versions prior to 0.22.0. The confluence_upload_attachment function allows an authenticated MCP client to read any file accessible to the server process by passing a client-supplied file_path directly to open() without validation. This can lead to unauthorized file access and potential exfiltration of sensitive data through Confluence attachments.

Detection Guidance

Check the MCP Atlassian server version. If it is below 0.22.0, the vulnerability is likely present. Run: pip show mcp-atlassian or check the server logs for version details.

Impact Analysis

An attacker with access to the MCP client could read sensitive files on the server, including configuration files, environment variables, or other credentials. If an AI agent is tricked into using the vulnerable tool, it could expose server secrets like CONFLUENCE_API_TOKEN, leading to further compromise of Atlassian services or connected systems.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's requirements for safeguarding protected health information. Unauthorized file access may result in data breaches, triggering compliance violations, legal penalties, and reputational damage for organizations handling regulated data.

Mitigation Strategies

Upgrade MCP Atlassian to version 0.22.0 or later immediately. This fixes the unsafe path handling in confluence_upload_attachment. After upgrading, review server environment variables and credentials for potential exposure.

Hi! I’m here to help you understand CVE-2026-73498. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70