https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-77272.htmlhttps://patchthecve.com/cve/CVE-2026-77272.htmlMon, 28 Sep 2026 13:10:43 +0000MEDIUM 5.4: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandler._send_response in oauth_setup.py and interpolated into an HTML page without escaping. A crafted authorization callback cahttps://patchthecve.com/cve/CVE-2026-77269.htmlhttps://patchthecve.com/cve/CVE-2026-77269.htmlTue, 29 Sep 2026 12:53:55 +0000MEDIUM 6.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the remediation for CVE-2026-27825 protects download destinations but does not constrain source paths used by attachment uploads. A caller can provide an absolute or traversal file_phttps://patchthecve.com/cve/CVE-2026-77268.htmlhttps://patchthecve.com/cve/CVE-2026-77268.htmlTue, 29 Sep 2026 18:59:26 +0000MEDIUM 5.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth fallback token directory and JSON file are created without explicit owner-only modes. Local users or processes with access through the resulting group or world permission bhttps://patchthecve.com/cve/CVE-2026-77266.htmlhttps://patchthecve.com/cve/CVE-2026-77266.htmlMon, 28 Sep 2026 13:14:12 +0000MEDIUM 6.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment accepts absolute paths and traversal sequences without constraining the resolved path to the server workspace. An MCP caller with attachment access can read a chosehttps://patchthecve.com/cve/CVE-2026-77262.htmlhttps://patchthecve.com/cve/CVE-2026-77262.htmlTue, 29 Sep 2026 18:59:33 +0000HIGH 8.6: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment accepts an attacker-controlled file_path and does not apply the path restriction added for the earlier download vulnerability. A caller can traverse outshttps://patchthecve.com/cve/CVE-2026-77259.htmlhttps://patchthecve.com/cve/CVE-2026-77259.htmlTue, 29 Sep 2026 13:03:37 +0000HIGH 7.7: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment opens a caller-selected server-local file without checking that the resolved path remains in the workspace. A caller can upload environment files, credenhttps://patchthecve.com/cve/CVE-2026-77257.htmlhttps://patchthecve.com/cve/CVE-2026-77257.htmlTue, 29 Sep 2026 18:59:42 +0000MEDIUM 6.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided file_path to local file operations without restricting it to the workspace. A remote MCP caller with tool access https://patchthecve.com/cve/CVE-2026-77256.htmlhttps://patchthecve.com/cve/CVE-2026-77256.htmlMon, 28 Sep 2026 13:18:25 +0000MEDIUM 6.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the plaintext OAuth fallback file containing refresh and access tokens is written with permissions inherited from the process umask. Under common or permissive configurations, other https://patchthecve.com/cve/CVE-2026-77255.htmlhttps://patchthecve.com/cve/CVE-2026-77255.htmlTue, 29 Sep 2026 13:41:25 +0000HIGH 8.6: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachments argument is converted into local paths and routed to the attachment upload implementation without workspace validation. A caller can make the MCP sehttps://patchthecve.com/cve/CVE-2026-77254.htmlhttps://patchthecve.com/cve/CVE-2026-77254.htmlMon, 28 Sep 2026 13:22:14 +0000CRITICAL 9.1: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity are allowed to reach tool handlers, which then use globally configured Jira or Confluence credentials. A network caller https://patchthecve.com/cve/CVE-2026-77253.htmlhttps://patchthecve.com/cve/CVE-2026-77253.htmlMon, 28 Sep 2026 13:23:46 +0000HIGH 7.1: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence attachment upload tools accept arbitrary local filesystem paths and send the selected bytes to Atlassian. In HTTP or multi-user deployments, a caller can cross thhttps://patchthecve.com/cve/CVE-2026-77249.htmlhttps://patchthecve.com/cve/CVE-2026-77249.htmlTue, 29 Sep 2026 18:59:49 +0000MEDIUM 5.3: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, JiraUserMixin._lookup_user_by_permissions uses the module-level requests.get function instead of the fetcher's protected session. A caller-controlled public Jira URL can redirect thahttps://patchthecve.com/cve/CVE-2026-77248.htmlhttps://patchthecve.com/cve/CVE-2026-77248.htmlMon, 28 Sep 2026 13:33:54 +0000HIGH 8.6: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport accepts requests without a user identity and falls back to operator credentials, while upload_attachment accepts an unrestricted file_path. An unauthenthttps://patchthecve.com/cve/CVE-2026-77247.htmlhttps://patchthecve.com/cve/CVE-2026-77247.htmlMon, 28 Sep 2026 14:37:25 +0000MEDIUM 6.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence upload tools interpret caller-controlled path arguments on the MCP server and open those files before sending them as attachments. In remote or multi-user deploymhttps://patchthecve.com/cve/CVE-2026-77246.htmlhttps://patchthecve.com/cve/CVE-2026-77246.htmlMon, 28 Sep 2026 14:31:10 +0000HIGH 7.4: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an Authorization identity and permits attacker-controlled Atlassian service headers, including X-Atlahttps://patchthecve.com/cve/CVE-2026-77274.htmlhttps://patchthecve.com/cve/CVE-2026-77274.htmlMon, 28 Sep 2026 13:41:36 +0000HIGH 8.2: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a backslash authority confusion because it interprets the authority differently from the Requests connection layer in the header-based Jira and Confluence Uhttps://patchthecve.com/cve/CVE-2026-77271.htmlhttps://patchthecve.com/cve/CVE-2026-77271.htmlMon, 28 Sep 2026 13:45:34 +0000HIGH 8.8: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call sites omit base_dir, allowing attacker-selected writes within the working direchttps://patchthecve.com/cve/CVE-2026-77270.htmlhttps://patchthecve.com/cve/CVE-2026-77270.htmlMon, 28 Sep 2026 13:35:22 +0000MEDIUM 6.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira and Confluence attachment upload tools treat caller-controlled file_path values as trusted server-local paths. The server opens the selected file and uploads it to an Atlasshttps://patchthecve.com/cve/CVE-2026-77267.htmlhttps://patchthecve.com/cve/CVE-2026-77267.htmlTue, 29 Sep 2026 18:59:56 +0000MEDIUM 6.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by _process_authentication_headers and used to construct Atlassian fetchers without calling validate_urlhttps://patchthecve.com/cve/CVE-2026-77265.htmlhttps://patchthecve.com/cve/CVE-2026-77265.htmlTue, 29 Sep 2026 19:00:07 +0000MEDIUM 5.9: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the hostname again for the connection. An unauthenticated caller can use a DNS-rebihttps://patchthecve.com/cve/CVE-2026-77261.htmlhttps://patchthecve.com/cve/CVE-2026-77261.htmlFri, 25 Sep 2026 17:36:32 +0000HIGH 7.1: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook is omitted from JiraFetcher and ConfluenceFetcher sessions created through the basic-auth and oauth_pat branches. If an attacker-controlled or compromised confighttps://patchthecve.com/cve/CVE-2026-77260.htmlhttps://patchthecve.com/cve/CVE-2026-77260.htmlTue, 29 Sep 2026 13:56:16 +0000HIGH 7.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementations accept an unconstrained file_path and open the referenced server-local file. A permitted MCP caller can upload sensitive hoshttps://patchthecve.com/cve/CVE-2026-77258.htmlhttps://patchthecve.com/cve/CVE-2026-77258.htmlTue, 29 Sep 2026 14:01:18 +0000HIGH 7.7: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachments.py accepts a caller-controlled file_path and opens the selected server-local file without restricting it to the workspachttps://patchthecve.com/cve/CVE-2026-77252.htmlhttps://patchthecve.com/cve/CVE-2026-77252.htmlFri, 25 Sep 2026 17:39:10 +0000MEDIUM 6.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, caller-supplied projects_filter and spaces_filter arguments can replace administrator-configured allowlists, and caller-provided project or space clauses can suppress the configured https://patchthecve.com/cve/CVE-2026-77251.htmlhttps://patchthecve.com/cve/CVE-2026-77251.htmlTue, 29 Sep 2026 14:21:29 +0000MEDIUM 6.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira search accepts a forbidden project clause because it checks only for the presence of project syntax, Confluence search uses an incomplete case-sensitive space check, and Jira bohttps://patchthecve.com/cve/CVE-2026-77250.htmlhttps://patchthecve.com/cve/CVE-2026-77250.htmlTue, 29 Sep 2026 14:22:55 +0000MEDIUM 6.1: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing access and refresh tokens under the user's .mcp-atlassian directory using process-default permissions. On systems with a permihttps://patchthecve.com/cve/CVE-2026-77244.htmlhttps://patchthecve.com/cve/CVE-2026-77244.htmlTue, 29 Sep 2026 15:17:49 +0000CRITICAL 10.0: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport accepts requests without a verified user identity and downstream fetcher construction falls back to the operator's globally configured Jira or Confluence credentiahttps://patchthecve.com/cve/CVE-2026-77243.htmlhttps://patchthecve.com/cve/CVE-2026-77243.htmlTue, 29 Sep 2026 15:32:58 +0000HIGH 8.8: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invokehttps://patchthecve.com/cve/CVE-2026-77242.htmlhttps://patchthecve.com/cve/CVE-2026-77242.htmlTue, 29 Sep 2026 15:41:42 +0000HIGH 7.5: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf checks a hostname's resolved addresses, but Requests and urllib3 resolve the hostname again when connecting. A caller can use a short-lived DNS answer that is p