CVE-2026-77243
Description
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke excluded read, write, or delete tools despite the operator's configured least-privilege restrictions. The advisory traces the vulnerable input and processing flow through ENABLED_TOOLS, TOOLSETS, tools/list, tools/call, and _call_tool_mcp, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
How to fix
- mcp-atlassian mcp_atlassian0.22.0 or later
- mcp-atlassian0.22.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcp-atlassian mcp_atlassian | v < 0.22.0 | 0.22.0 |
| mcp-atlassianPyPI | v < 0.22.0 | 0.22.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.