{"data":{"id":"70ea13d5-ee25-47db-8e05-5e38650bd483","title":"GHSA-f26r-j276-ggg4: MCP Atlassian: Arbitrary File Read via Upload Attachment Tools","summary":"The upload_attachment methods in MCP Atlassian's Confluence and Jira integrations accept arbitrary file paths without path traversal validation. The validate_safe_path utility is used in the download paths but never called in the upload paths, so an authenticated MCP client, or an AI assistant manipulated via prompt injection, can read any file the server process can access and upload it to an attacker-chosen Confluence page or Jira issue.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-f26r-j276-ggg4","publishedAt":"2026-09-22T20:35:11.000Z","cveId":"CVE-2026-77270","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["mcp-atlassian@< 0.22.0 (fixed: 0.22.0)"],"affectedPackageNames":["mcp-atlassian"],"affectedPackageRefs":["pypi:mcp-atlassian"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["MCP Atlassian","Confluence","Jira","AI assistant"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.005,"epssCheckedAt":"2026-11-09T18:09:51.972Z","kevDateAdded":null,"advisoryAliases":["GHSA-f26r-j276-ggg4"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-09-22T20:35:11.000Z","fixReleasedAt":"2026-07-10T13:40:13.653Z","daysToFix":-74,"fixCheckedAt":"2026-10-29T21:30:19.614Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"pypi","name":"mcp-atlassian","fixedVersion":"0.22.0","matchedVersion":"0.22.0","fixReleasedAt":"2026-07-10T13:40:13.653Z","daysToFix":-74,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:30:19.468Z"}]}}