CVE record published for MCP Atlassian arbitrary file read fixed in 0.22.0

A CVE record for MCP Atlassian, a community MCP server for Atlassian's Confluence and Jira products, was published to the National Vulnerability Database on 2026-08-12 as CVE-2026-73498. The underlying repository advisory, GHSA-g5r6-gv6m-f5jv, dates to 2026-07-10 and rates the flaw high, with a CVSS score of 7.7.

Prior to version 0.22.0 of the mcp-atlassian package on PyPI, the confluence_upload_attachment tool passed its client-supplied file_path argument directly to open(file_path, "rb") through _upload_attachment_direct() without calling the project's validate_safe_path check. An authenticated MCP client could read any file accessible to the server process and exfiltrate it to Confluence as an attachment. The advisory also notes the indirect path: if an AI agent connected to the server can be induced to call the tool through untrusted content, the same flaw can disclose server environment variables and other local files.

The fix shipped in 0.22.0. As with all security coverage here, the severity and affected-version range are stated exactly as the discloser recorded them.