AIKIDO-2026-593722
mcp-atlassian is vulnerable to Arbitrary File Read
74
High Risk
This Affects:
mcp-atlassianTL;DR
The Confluence and Jira attachment upload tools open a caller-supplied file_path without validating it against a safe root, and the transport lets a client point the upload at an attacker-controlled destination via Atlassian service URL headers. A remote client can cause the server to read arbitrary local files such as .env files, SSH keys, or cloud credentials and send them to an attacker-controlled endpoint. Exploitation needs the HTTP transport with write tools enabled but no valid account. The fix applies a safe-path check to upload paths and tightens header-based URL handling.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you expose the streamable-http or SSE transport with attachment upload enabled.
Background info
mcp-atlassian is vulnerable to Arbitrary File Read in versions 0.0.1 - 0.21.1.
How to fix this
Upgrade the mcp-atlassian library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant