A critical Server-Side Request Forgery vulnerability in the mcp-atlassian server allows unauthenticated attackers to execute arbitrary outbound HTTP requests, posing a significant risk of cloud credential theft.

The application is susceptible to a Server-Side Request Forgery (CWE-918) flaw located in the HTTP middleware and dependency injection layer. An unauthenticated attacker can force the server to initiate outbound requests to arbitrary URLs by supplying specific custom HTTP headers without providing an Authorization header.

The ability to perform SSRF in this context allows for internal network scanning and potential compromise of sensitive cloud infrastructure. In cloud environments, this vulnerability can be leveraged to steal IAM role credentials from the instance metadata service, leading to full unauthorized access to cloud resources. Given the CVSS score of 8.2, this represents a high-severity risk that could facilitate lateral movement and data exfiltration.

Immediate Action: Update the mcp-atlassian package to version 0.17.0 or later to apply the necessary security fixes in the middleware layer.

Proactive Monitoring: Monitor network egress logs for unusual traffic patterns originating from the server, particularly requests directed toward internal metadata endpoints or local network segments.

Compensating Controls: Deploy a Web Application Firewall (WAF) or egress filtering rules to restrict the server from initiating unauthorized outbound connections to internal metadata services or unauthorized external domains.

Public Exploit Available: Unknown.

Organizations utilizing the mcp-atlassian server must prioritize upgrading to version 0.17.0 immediately. The potential for cloud credential theft via the instance metadata service makes this an urgent security priority, and failure to patch could lead to a complete compromise of the hosting environment.