CVE-2026-73497

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). From 0.17.0 until 0.22.0, validate_url_for_ssrf resolves the attacker-controlled X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url header host once at middleware time, but the outbound request is built with the raw hostname and resolves it again at connection time with no IP pinning. An attacker-controlled DNS-rebinding name can return a public IP during validation and 169.254.169.254 or another internal IP during connection, enabling unauthenticated server-side requests to cloud metadata or internal services. The flaw spans src/mcp_atlassian/utils/urls.py, src/mcp_atlassian/servers/main.py, and src/mcp_atlassian/servers/dependencies.py; validate_url_for_ssrf returns only a verdict rather than a pinned IP, UserTokenMiddleware processes the attacker-controlled headers before fetcher creation, and the Jira and Confluence fetchers use the raw hostname. This issue is fixed in version 0.22.0.

• CWE-918

• https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460
• https://github.com/sooperset/mcp-atlassian/pull/1448
• https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0
• https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-489g-7rxv-6c8q

Published

Sep 14, 2026

Last Modified

Sep 15, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-73491Loofah is a general library for manipulating and transformin…2.3
• CVE-2026-73492Loofah is a general library for manipulating and transformin…2.3
• CVE-2026-73493Http4s (http4s-blaze-server) is a minimal, idiomatic Scala i…7.5
• CVE-2026-73494blaze is a Scala library for building asynchronous pipelines…7.4
• CVE-2026-73495blaze is a Scala library for building asynchronous pipelines…7.4
• CVE-2026-73496MCP Atlassian is a Model Context Protocol (MCP) server for A…7.7
• CVE-2026-73498MCP Atlassian is a Model Context Protocol (MCP) server for A…7.7
• CVE-2026-73499etcd is a distributed key-value store for the data of a dist…7.1
• CVE-2026-7350Use after free in WebMIDI in Google Chrome prior to 147.0.77…8.3
• CVE-2026-73500etcd is a distributed key-value store for the data of a dist…8.7
• CVE-2026-73501kin-openapi is a Go project for handling OpenAPI files. Prio…9.1
• CVE-2026-73502kin-openapi is a Go project for handling OpenAPI files. From…5.3