CVE-2026-77271 | sooperset mcp-atlassian up to 0.21.x Attachment validate_safe_path base_dir path traversal

September 22, 2026 Yanac

A vulnerability was found in sooperset mcp-atlassian up to 0.21.x and classified as critical. This affects the function validate_safe_path of the component Attachment Handler. Such manipulation of the argument base_dir leads to path traversal.

This vulnerability is listed as CVE-2026-77271. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More