CVE-2026-73498: MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_attachment
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluenceuploadattachment passes its client-supplied filepath directly to open(filepath, "rb") in src/mcpatlassian/confluence/attachments.py through uploadattachmentdirect() without calling validatesafepath. An authenticated MCP client can read any file accessible to the server process and exfiltrate it to Confluence as an attachment. If an AI agent can be induced to call the tool through untrusted content, the same flaw can disclose server environment variables such as CONFLUENCEAPITOKEN and other credentials. This issue is fixed in version 0.22.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MCP Atlassian (confluence_upload_attachment)to a version that resolves this vulnerability.Fixed in 0.22.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73498?
CVE-2026-73498 has a high severity rating of 7.7.
What type of vulnerability is CVE-2026-73498?
CVE-2026-73498 is a Path Traversal vulnerability affecting MCP Atlassian.
How do I fix CVE-2026-73498?
To fix CVE-2026-73498, upgrade to MCP Atlassian version 0.22.0 or later.
What products are affected by CVE-2026-73498?
CVE-2026-73498 affects Atlassian products, specifically Confluence and Jira.
What does CVE-2026-73498 allow an attacker to do?
CVE-2026-73498 allows an attacker to read arbitrary files due to missing path validation.