Am I affected by MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths? What should I do?
In HTTP mode, the Jira and Confluence attachment upload tools accept file paths chosen by the caller.
Affected: mcp-atlassian < 0.22.0. Fixed in: 0.22.0. What should you check, and what should you do about it?
Full incident page with sources: https://agentarmorhq.com/incidents/2026/09/cve-2026-77257-mcp-atlassian (opens external site)
1 answer
Am I affected? Affected: mcp-atlassian < 0.22.0. Fixed in: 0.22.0.
- Check your version: run
pip show mcp-atlassian. Versions < 0.22.0 of mcp-atlassian are affected.
What to do now
- Upgrade to the fixed version: run
pip install --upgrade "mcp-atlassian>=0.22.0"(first patched version 0.22.0). - Set READ_ONLY_MODE=true to block write tools; the project documents it as an optional hardening setting that is off by default.
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
Sources
- GitHub Advisory Database: https://github.com/advisories/GHSA-mrq8-fv7v-hhjg (opens external site)
Full incident page: https://agentarmorhq.com/incidents/2026/09/cve-2026-77257-mcp-atlassian (opens external site)
Did this work for you?- Check your version: run