Vibe Coding
MCP Atlassian's Confluence upload tools read any path on the server and post it to Atlassian
CVE-2026-73496, published 2026-09-14, scores 7.7. Prior to 0.22.0, `confluence_upload_attachment`, `confluence_upload_attachments` and the `jira_update_issue` attachments parameter pass a client-controlled `file_path` to upload_attachment without confining it to a server workspace. In remote HTTP, SSE or multi-user deployments, absolute or traversing paths resolve on the MCP server, letting a client with write-tool access exfiltrate server files, environment-held Atlassian credentials, or another tenant's data. Local stdio deployments do not cross the trust boundary. Fixed in 0.22.0.
Source
↳ Follow the thread