{"data":{"id":"3318c9fa-3193-49c0-b635-2e09f4d9365a","title":"GHSA-xjgw-4wvw-rgm4: MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment","summary":"GHSA-xjgw-4wvw-rgm4 affects MCP Atlassian. The confluence_download_attachment tool accepts a download_path parameter that is written to without any directory boundary enforcement, so an attacker who controls an attachment's content can write it to any path the server process can write, such as /etc/cron.d/, leading to arbitrary code execution. The MCP HTTP transport carries no authentication by default and binds to 0.0.0.0, so the issue is reachable from the local network.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-xjgw-4wvw-rgm4","publishedAt":"2026-03-10T18:56:07.000Z","cveId":"CVE-2026-27825","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["mcp-atlassian@< 0.17.0 (fixed: 0.17.0)"],"affectedPackageNames":["mcp-atlassian"],"affectedPackageRefs":["pypi:mcp-atlassian"],"affectedVendors":[],"affectedVendorsRaw":["MCP Atlassian","Confluence","MCP server"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.11498,"epssCheckedAt":"2026-11-04T06:10:13.820Z","kevDateAdded":null,"advisoryAliases":["GHSA-xjgw-4wvw-rgm4"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-03-10T18:56:07.000Z","fixReleasedAt":"2026-02-24T11:56:33.114Z","daysToFix":-14,"fixCheckedAt":"2026-10-29T21:40:00.059Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"mcp-atlassian","fixedVersion":"0.17.0","matchedVersion":"0.17.0","fixReleasedAt":"2026-02-24T11:56:33.114Z","daysToFix":-14,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:39:59.913Z"}]}}