A high-severity path traversal vulnerability in Sooperset mcp-atlassian allows authenticated users to disclose sensitive host files, posing a significant risk to data confidentiality.

The vulnerability exists due to improper validation of caller controlled path arguments within the AttachmentsMixin processing flow. Any authenticated client can trigger this flaw to read arbitrary files from the server host without requiring shell or direct filesystem access.

Successful exploitation of this flaw allows an authenticated attacker to gain unauthorized access to sensitive local files, which may include configuration files, credentials, or proprietary data stored on the host. Given the CVSS score of 8.3, this represents a significant risk to organizational data integrity and confidentiality, particularly in multi-user or remote deployment environments.

Immediate Action: Update the mcp-atlassian package to version 0.22.0 or later immediately to incorporate the necessary input validation fixes.

Proactive Monitoring: Review application and system access logs for anomalous file path patterns or unexpected attempts to access system directories via the MCP server interface.

Compensating Controls: Implement strict network segmentation for the MCP server and ensure that the service runs with the least privilege necessary, minimizing the impact if the host filesystem is accessed.

Public Exploit Available: No

This vulnerability presents a clear risk to host system security by enabling unauthorized file disclosure. Security teams should prioritize the update to version 0.22.0 across all affected environments. Failure to patch this issue could allow an authenticated actor to bypass intended security boundaries and access sensitive information residing on the server infrastructure.