{"id":"CVE-2026-124503","kind":"vulnerability","aliases":["CVE-2026-124503"],"related":[],"title":"mcp-atlassian: path traversal in file validation lets requests reach outside intended folders","description":"A vulnerability was identified in sooperset mcp-atlassian up to 0.24.0. This issue affects the function validate_safe_path of the file src/mcp_atlassian/utils/io.py. The manipulation of the argument path leads to path traversal. The attack may be initiated remotely. The exploit is publicly available and might be used. Upgrading to version 0.24.1 is capable of addressing this issue. Upgrading the affected component is recommended. This CVE was requested by the vendor.","summary":"The mcp-atlassian MCP server fails to properly validate file paths in validate_safe_path, allowing a crafted path argument to traverse directories. An attacker who can send requests to the server may read or write files outside the intended location.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","atlassian","mcp","python"],"not_affected_if":["no-file-path-tools","version-0.24.1-or-later"],"how_to_check":"- Check the installed version of mcp-atlassian with `pip show mcp-atlassian` and compare it to `0.24.0`\n- Look for `validate_safe_path` in `src/mcp_atlassian/utils/io.py` to confirm the affected code is present","fix":"- mcp-atlassian: upgrade to `0.24.1`","status":"open","published_at":"2026-11-10T10:16:43+00:00","first_seen_at":"2026-11-10T10:21:12+00:00","triaged_at":"2026-11-10T10:21:29+00:00","updated_at":"2026-11-10T10:21:29+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-11-10T10:21:29Z","model":"claude-haiku-5-5","output":{"fix":"- mcp-atlassian: upgrade to `0.24.1`","reach":"network","title":"mcp-atlassian: path traversal in file validation lets requests reach outside intended folders","impact":"medium","summary":"The mcp-atlassian MCP server fails to properly validate file paths in validate_safe_path, allowing a crafted path argument to traverse directories. An attacker who can send requests to the server may read or write files outside the intended location.","audience":"developers","category":"ai-tooling","nicknames":[],"who_cares":["mcp","python","atlassian"],"confidence":0.7,"fix_status":"available","needs_auth":"unknown","worst_case":"Files outside the intended directory can be read or written by the attacker","analyst_note":"Confirm required conditions for exploitation and which tools reach validate_safe_path, using the vendor advisory and release notes linked in the sources.","how_to_check":"- Check the installed version of mcp-atlassian with `pip show mcp-atlassian` and compare it to `0.24.0`\n- Look for `validate_safe_path` in `src/mcp_atlassian/utils/io.py` to confirm the affected code is present","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-file-path-tools","version-0.24.1-or-later"],"who_is_affected":"Teams running mcp-atlassian up to 0.24.0 as an MCP server that accepts file path arguments from clients or model output. Deployments that do not expose file path tools to untrusted input are less exposed. The sources do not describe the exact exploitation conditions.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000763,"input_tokens":4637,"output_tokens":598,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-124503':17A,20A '-2026':16A,19A '0.24.0':80C '0.24.1':121C 'address':125C 'affect':83C,130C 'ai':22B 'ai-tool':21B 'allow':43B 'argument':47B,97C 'atlassian':3A,24B,30B,77C 'attack':52B,104C 'avail':113C 'capabl':123C 'compon':131C 'craft':45B 'cve':15A,18A,135C 'directori':50B 'exploit':110C 'fail':33B 'file':7A,37B,64B,91C 'folder':14A 'function':85C 'identifi':72C 'initi':107C 'intend':13A,67B 'issu':82C,127C 'lead':99C 'let':9A 'locat':68B 'manipul':94C 'may':60B,105C 'mcp':2A,25B,29B,31B,76C 'mcp-atlassian':1A,28B,75C 'might':115C 'outsid':12A,65B 'path':4A,38B,42B,46B,88C,98C,101C 'proper':35B 'public':112C 'python':26B 'reach':11A 'read':61B 'recommend':133C 'remot':108C 'request':10A,56B,137C 'safe':41B,87C 'send':55B 'server':32B,59B 'sooperset':74C 'src/mcp_atlassian/utils/io.py':92C 'tool':23B 'travers':5A,49B,102C 'upgrad':118C,128C 'use':117C 'valid':8A,36B,40B,86C 'vendor':140C 'version':120C 'vulner':70C 'write':63B","nicknames":[],"mitigations":[],"who_affected":"Teams running mcp-atlassian up to 0.24.0 as an MCP server that accepts file path arguments from clients or model output. Deployments that do not expose file path tools to untrusted input are less exposed. The sources do not describe the exact exploitation conditions.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aitooling","atlassian","mcp","medium","python"],"campaign_type":null,"search_a":"'-124503':17A,20A '-2026':16A,19A 'atlassian':3A 'cve':15A,18A 'file':7A 'folder':14A 'intend':13A 'let':9A 'mcp':2A 'mcp-atlassian':1A 'outsid':12A 'path':4A 'reach':11A 'request':10A 'travers':5A 'valid':8A","search_b":"'ai':22B 'ai-tool':21B 'allow':43B 'argument':47B 'atlassian':24B,30B 'attack':52B 'craft':45B 'directori':50B 'fail':33B 'file':37B,64B 'intend':67B 'locat':68B 'may':60B 'mcp':25B,29B,31B 'mcp-atlassian':28B 'outsid':65B 'path':38B,42B,46B 'proper':35B 'python':26B 'read':61B 'request':56B 'safe':41B 'send':55B 'server':32B,59B 'tool':23B 'travers':49B 'valid':36B,40B 'write':63B","search_c":"'0.24.0':80C '0.24.1':121C 'address':125C 'affect':83C,130C 'argument':97C 'atlassian':77C 'attack':104C 'avail':113C 'capabl':123C 'compon':131C 'cve':135C 'exploit':110C 'file':91C 'function':85C 'identifi':72C 'initi':107C 'issu':82C,127C 'lead':99C 'manipul':94C 'may':105C 'mcp':76C 'mcp-atlassian':75C 'might':115C 'path':88C,98C,101C 'public':112C 'recommend':133C 'remot':108C 'request':137C 'safe':87C 'sooperset':74C 'src/mcp_atlassian/utils/io.py':92C 'travers':102C 'upgrad':118C,128C 'use':117C 'valid':86C 'vendor':140C 'version':120C 'vulner':70C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T15:23:37+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124503","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124503","severity":null,"published_at":"2026-11-10T10:16:43+00:00","modified_at":"2026-11-10T10:16:43+00:00","first_seen_at":"2026-11-10T10:21:12+00:00","fetched_at":"2026-11-10T10:21:12+00:00","note":null}],"documents":[{"id":114360,"url":"https://github.com/sooperset/mcp-atlassian/releases/tag/v0.24.1","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":114361,"url":"https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-qh7q-jmc7-rc7j","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-11-08T15:23:37+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}