CVE-2026-77269 | sooperset mcp-atlassian up to 0.21.x Attachment Upload upload_attachment file_path path traversal

September 22, 2026 Yanac

A vulnerability has been found in sooperset mcp-atlassian up to 0.21.x and classified as problematic. Impacted is the function upload_attachment of the component Attachment Upload. The manipulation of the argument file_path leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-77269. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More