The sooperset mcp-atlassian server is vulnerable to a path traversal flaw that allows authenticated users to exfiltrate sensitive host files via the Confluence and Jira upload_attachment interface.

This vulnerability is a path traversal (CWE-22) issue within the upload_attachment function. A permitted Model Context Protocol (MCP) caller can supply an unconstrained file_path parameter to read arbitrary files from the server host and subsequently upload them to an Atlassian destination.

Successful exploitation of this vulnerability poses a significant risk to data confidentiality, as attackers can access sensitive configuration files, credentials, or other proprietary information stored on the host running the MCP server. Given the CVSS score of 8.3, this is classified as a high-severity issue that could lead to full system compromise or lateral movement within the environment.

Immediate Action: Update the mcp-atlassian package to version 0.22.0 or later to ensure proper input validation on file paths.

Proactive Monitoring: Review access logs for the MCP server to identify unusual file access patterns or attempts to upload files originating from unexpected system directories.

Compensating Controls: Restrict access to the MCP server to only trusted and necessary service accounts, and implement network-level segmentation to limit the impact if the host is compromised.

Public Exploit Available: Unknown.

Organizations utilizing the mcp-atlassian server should prioritize patching to version 0.22.0 immediately. Because this vulnerability allows for the unauthorized retrieval of sensitive host data, timely remediation is essential to prevent potential data exfiltration and maintaining the integrity of the Atlassian integration environment.