A path traversal vulnerability in sooperset mcp-atlassian versions prior to 0.22.0 allows authenticated attackers to disclose sensitive local files.

This vulnerability is a path traversal flaw (CWE-22) occurring in the Jira and Confluence attachment upload tools. Authenticated users with upload access can provide arbitrary file paths to the confluence_upload_attachment or jira_upload_attachment functions, which the server then reads and uploads to an Atlassian issue or page.

The ability to read arbitrary files from the server exposes sensitive information, such as configuration files, credentials, or proprietary data stored on the host system. While the CVSS score of 6.5 reflects a medium severity, the impact is significant if the server process has broad filesystem permissions. Unauthorized access to these files can lead to further system compromise and potential data breaches, resulting in serious reputational and operational damage.

Immediate Action: Update the mcp-atlassian package to version 0.22.0 or later to include the necessary path validation fixes.

Proactive Monitoring: Review application and system logs for unusual file access patterns, specifically monitoring for unexpected input values in attachment upload requests.

Compensating Controls: Ensure the server process runs with the principle of least privilege, restricting its access to only the directories and files strictly necessary for its operation to limit the scope of potential traversal attacks.

Public Exploit Available: Unknown.

Given the availability of a proof-of-concept and the potential for unauthorized data disclosure, organizations should prioritize updating their mcp-atlassian deployment to version 0.22.0. Immediate patching is the most effective way to eliminate the underlying path traversal risk and protect the confidentiality of the host filesystem.