CVE-2026-27825

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, the `confluence_download_attachment` MCP tool accepts a `download_path` parameter that is written to without any directory boundary enforcement. An attacker who can call this tool and supply or access a Confluence attachment with malicious content can write arbitrary content to any path the server process has write access to. Because the attacker controls both the write destination and the written content (via an uploaded Confluence attachment), this constitutes for arbitrary code execution (for example, writing a valid cron entry to `/etc/cron.d/` achieves code execution within one scheduler cycle with no server restart required). Version 0.17.0 fixes the issue.

• CWE-22
• CWE-73

• https://github.com/sooperset/mcp-atlassian/commit/52b9b0997681e87244b20d58034deae89c91631ePatch
• https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-xjgw-4wvw-rgm4Vendor Advisory

Published

Mar 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2782Privilege escalation in the Netmonitor component. This vulne…9.8
• CVE-2026-27820zlib is a Ruby interface for the zlib compression/decompress…9.8
• CVE-2026-27821GPAC is an open-source multimedia framework. In versions up …7.8
• CVE-2026-27822RustFS is a distributed object storage system built in Rust.…5.4
• CVE-2026-27823A vulnerability has been identified in EGroupware that may l…8.7
• CVE-2026-27824calibre is a cross-platform e-book manager for viewing, conv…5.3
• CVE-2026-27826MCP Atlassian is a Model Context Protocol (MCP) server for A…8.2
• CVE-2026-27828EVerest is an EV charging software stack. Prior to version 2…7.5
• CVE-2026-27829Astro is a web framework. In versions 9.0.0 through 9.5.3, a…7.2
• CVE-2026-2783Information disclosure due to JIT miscompilation in the Java…7.5
• CVE-2026-27830c3p0, a JDBC Connection pooling library, is vulnerable to at…8.9
• CVE-2026-27831rldns is an open source DNS server. Version 1.3 has a heap-b…7.5