A high-severity path traversal vulnerability in the sooperset mcp-atlassian server allows authenticated attackers to exfiltrate sensitive local files.

The software fails to properly sanitize the file_path parameter during upload operations, allowing an authenticated MCP caller to perform path traversal. This flaw resides within the streamable-http and upload_attachment modules, bypassing intended workspace restrictions.

This vulnerability poses a significant risk to data confidentiality by enabling unauthorized access to sensitive files on the host system. With a CVSS score of 8.3, the impact is substantial, as an attacker could exfiltrate configuration files, credentials, or proprietary data by leveraging the application to upload them as Jira or Confluence attachments.

Immediate Action: Update the mcp-atlassian package to version 0.22.0 or later to apply the necessary path validation fixes.

Proactive Monitoring: Review application logs for unusual file access patterns or suspicious upload activity originating from MCP tool callers.

Compensating Controls: Implement strict network segmentation for the MCP server to ensure that only authorized services can reach the endpoint, reducing the exposure to potentially malicious callers.

Public Exploit Available: Unknown.

Organizations utilizing mcp-atlassian must prioritize updating to version 0.22.0 to remediate this path traversal risk. Given the potential for sensitive data exposure, prompt patching is required to ensure the integrity and confidentiality of the underlying host environment.