CVE-2026-73498

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0

Description The software fails to call validate safe path when processing the file path variable within the confluence upload attachment tool. This occurs in the upload attachment direct() function located in src/mcp atlassian/confluence/attachments.py, where the client-supplied path is passed directly to the open() function. An authenticated client can exploit this to read any file accessible to the server process and exfiltrate it to Confluence as an attachment. Additionally, if an AI agent is induced to call this tool via untrusted content, sensitive server environment variables, such as CONFLUENCE API TOKEN, may be disclosed.

Recommendations Update to version 0.22.0.