CVE-2026-124503 | sooperset mcp-atlassian up to 0.24.0 io.py validate_safe_path path traversal (GHSA-qh7q-jmc7-rc7j)

November 10, 2026 Yanac

A vulnerability was found in sooperset mcp-atlassian up to 0.24.0. It has been classified as problematic. This issue affects the function validate_safe_path of the file src/mcp_atlassian/utils/io.py. The manipulation of the argument path leads to path traversal.

This vulnerability is listed as CVE-2026-124503. The attack may be initiated remotely. In addition, an exploit is available.

Upgrading the affected component is recommended.

This CVE was requested by the vendor.VulDB Recent EntriesRead More