CVE-2026-77247: mcp-atlassian Arbitrary Server-Local File Upload Vulnerability
Summary
CVE-2026-77247: The Jira and Confluence attachment upload tools accept caller-controlled file path parameters and read those paths from the MCP server's local filesystem before uploading the file as an Atlassian attachment. Affects mcp-atlassian versions < 0.22.0. Fixed in 0.22.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
mcp-atlassian is a Python package that facilitates interactions with Atlassian products like Jira and Confluence. It allows users to upload attachments and manage content programmatically. However, it has a critical vulnerability that permits arbitrary file uploads from the server's local filesystem, potentially exposing sensitive data.
Vulnerability Detail
The vulnerability arises from the way the mcp-atlassian package handles file path parameters during attachment uploads. It allows users to specify file paths that the server reads directly from its local filesystem. This can lead to unauthorized access to sensitive files, as any user with permission to invoke upload tools can exploit this to upload files that the server process can read, including configuration files, secrets, and other sensitive data.
How To Fix
Latest published version: 0.23.1 as of 23 Oct 2026
pip install --upgrade "mcp-atlassian==0.23.1"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.22.0
This is the first release that contains the fix.
pip install --upgrade "mcp-atlassian==0.22.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict the use of upload tools in environments where multiple users have access. Ensure that only trusted users can invoke these tools, or disable the upload functionality until the package is updated.
Conclusion
The mcp-atlassian package has a significant vulnerability that allows arbitrary file uploads from the server's local filesystem, posing a risk of sensitive data exposure. It is crucial to update to the patched version to mitigate this risk and ensure the security of your application.
See every vulnerability recorded for mcp-atlassian →
FAQ
CVE-2026-77247 is a vulnerability in the mcp-atlassian package that allows arbitrary file uploads from the server's local filesystem, potentially exposing sensitive data.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include unauthorized access to sensitive files, such as application configurations, secrets, and credentials, which can lead to further exploitation.
Yes, a patch is available in version 0.22.0 of the mcp-atlassian package. It is recommended to update to this version immediately.
If you cannot update immediately, consider restricting access to the upload tools and monitoring your application for any suspicious activity.
References
Related vulnerabilities
Recent vulnerabilities recorded for mcp-atlassian.
