highresolved
Atlassian MCP path traversal (CVE-2026-73498)
The confluence_upload_attachment tool failed to validate file paths, letting any authenticated MCP client read arbitrary files accessible to the server process. CVSS 7.7, fixed in v0.22.0.
The confluence_upload_attachment tool passed a client-supplied file path straight to a file open call without validation. An authenticated MCP client could set the path to any file the server process could read and retrieve its contents, a classic path traversal. The issue scored CVSS 7.7 and was fixed in v0.22.0.
Takeaway
Every file path that crosses the MCP boundary is attacker-controlled input. Validate and canonicalize paths against an allowed root before the server touches the filesystem.
Sources
mcpatlassianpath-traversalCVE-2026-73498