# mcp-atlassian (PyPI) vulnerabilities 30 known vulnerabilities (2 critical, 19 high, 9 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 0.23.1 (Aug 19, 2026): no advisory affects it - Newest unaffected release: 0.23.1 (Aug 19, 2026), the latest release - Weekly downloads: 213.2K - Dependents: 2 - Releases: 83 since 0.1.1 (Dec 4, 2024) - Registry: https://pypi.org/project/mcp-atlassian/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-77246: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77248: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77249: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77259: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77268: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77247: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77272: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77269: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77266: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77255: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77262: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77253: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77257: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77261: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77260: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77271: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77243: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77251: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77267: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77250: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77244: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77265: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77270: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77258: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-77274: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-73497: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-73496: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-73498: 0.1.1 to 0.21.1 (0.22.0 is outside it) - CVE-2026-27825: 0.1.1 to 0.16.1 (0.17.0 is outside it) - CVE-2026-27826: 0.1.1 to 0.16.1 (0.17.0 is outside it) ## Advisories (30) ### [CVE-2026-77246](https://cve.now/CVE-2026-77246): MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path - Severity: High 7.4 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77248](https://cve.now/CVE-2026-77248): MCP Atlassian: Unauthenticated arbitrary local file read via upload\_attachment file\_path, chained with missing auth on streamable-http transport - Severity: High 8.6 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77249](https://cve.now/CVE-2026-77249): MCP Atlassian: Incomplete fix for CVE-2026-27826: redirect-based SSRF via unhooked requests session in Jira user-permission lookup - Severity: Medium 5.3 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77259](https://cve.now/CVE-2026-77259): MCP Atlassian: Arbitrary file read via confluence\_upload\_attachment allows exfiltration of server credentials - Severity: High 7.7 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77268](https://cve.now/CVE-2026-77268): MCP Atlassian: Insecure File Permissions on OAuth Token Storage - Severity: Medium 5.5 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77247](https://cve.now/CVE-2026-77247): MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file\_path parameters - Severity: High 8.3 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77272](https://cve.now/CVE-2026-77272): MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler - Severity: Medium 5.4 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77269](https://cve.now/CVE-2026-77269): MCP Atlassian: Path traversal in upload\_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825) - Severity: Medium 6.5 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77266](https://cve.now/CVE-2026-77266): MCP Atlassian: Path traversal in upload\_attachment allows arbitrary file read and exfiltration via MCP tool call - Severity: Medium 6.5 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77255](https://cve.now/CVE-2026-77255): MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update\_issue - Severity: High 8.6 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77262](https://cve.now/CVE-2026-77262): MCP Atlassian: Path Traversal / Arbitrary File Read in confluence\_upload\_attachment MCP tool (incomplete fix of CVE-2026-27825) - Severity: High 8.6 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77253](https://cve.now/CVE-2026-77253): MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files - Severity: High 7.1 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77257](https://cve.now/CVE-2026-77257): MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths - Severity: High 8.3 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77261](https://cve.now/CVE-2026-77261): MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches - Severity: High 7.1 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77260](https://cve.now/CVE-2026-77260): MCP Atlassian: Arbitrary local file READ via unconstrained file\_path in upload\_attachment (Confluence + Jira) - Severity: High 8.3 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77271](https://cve.now/CVE-2026-77271): MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of CVE-2026-27825) - Severity: High 8.3 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77243](https://cve.now/CVE-2026-77243): MCP Atlassian: ENABLED\_TOOLS / Toolset authorization bypass - Severity: High 8.8 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77251](https://cve.now/CVE-2026-77251): MCP Atlassian: JIRA\_PROJECTS\_FILTER / CONFLUENCE\_SPACES\_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud) - Severity: High 8.3 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77267](https://cve.now/CVE-2026-77267): mcp-atlassian has an incomplete SSRF remediation - Severity: High 8.3 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77250](https://cve.now/CVE-2026-77250): MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions - Severity: Medium 6.1 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77244](https://cve.now/CVE-2026-77244): \[mcp-atlassian\] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token - Severity: Critical 10.0 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77265](https://cve.now/CVE-2026-77265): MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow - Severity: Medium 5.9 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77270](https://cve.now/CVE-2026-77270): MCP Atlassian: Arbitrary File Read via Upload Attachment Tools - Severity: Medium 6.5 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77258](https://cve.now/CVE-2026-77258): MCP Atlassian: Arbitrary file read/exfiltration via upload\_attachment missing validate\_safe\_path() - Severity: High 7.7 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-77274](https://cve.now/CVE-2026-77274): MCP Atlassian: SSRF Protection Bypass - Severity: High 8.8 - Published: Sep 22, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-73497](https://cve.now/CVE-2026-73497): MCP Atlassian is a Model Context Protocol (MCP): DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826): unauthenticated SSRF to… - Severity: Medium 6.5 - Published: Sep 14, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 66 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-73496](https://cve.now/CVE-2026-73496): MCP Atlassian: Arbitrary server-side file read via attachment upload - Severity: High 7.7 - Published: Sep 14, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 66 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-73498](https://cve.now/CVE-2026-73498): MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence\_upload\_attachment - Severity: High 7.7 - Published: Aug 12, 2026 - Affected: fixed in 0.22.0. - Fixed in 0.22.0 (released Jul 10, 2026, 33 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-27825](https://cve.now/CVE-2026-27825): MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download\_path in… - Severity: Critical 9.1 - Published: Mar 10, 2026 - Affected: fixed in 0.17.0. - Fixed in 0.17.0 (released Feb 24, 2026, 14 days before disclosure). - The latest release, 0.23.1, is not affected. ### [CVE-2026-27826](https://cve.now/CVE-2026-27826): MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers - Severity: High 8.2 - Published: Mar 10, 2026 - Affected: fixed in 0.17.0. - Fixed in 0.17.0 (released Feb 24, 2026, 14 days before disclosure). - The latest release, 0.23.1, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/mcp-atlassian Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.