Detections
Analytics

SCA: security update for mcp-atlassian (GHSA-g5r6-gv6m-f5jv)

high Tenable Self-Hosted Container Security Plugin ID 445927

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior
 to 0.22.0, confluence_upload_attachment passes its client-supplied file_path directly to open(file_path,
 "rb") in src/mcp_atlassian/confluence/attachments.py through _upload_attachment_direct() without calling
 validate_safe_path. An authenticated MCP client can read any file accessible to the server process and
 exfiltrate it to Confluence as an attachment. If an AI agent can be induced to call the tool through
 untrusted content, the same flaw can disclose server environment variables such as CONFLUENCE_API_TOKEN
 and other credentials. This issue is fixed in version 0.22.0. (CVE-2026-73498)

Solution

Update the mcp-atlassian library and its related packages to version 0.22.0 or later.

See Also

https://github.com/advisories/GHSA-g5r6-gv6m-f5jv

Plugin Details

Severity: High

ID: 445927

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 8/13/2026

Updated: 8/13/2026

Risk Information

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:N/A:N

CVSS Score Source: CVE-2026-73498

CVSS v3

Risk Factor: High

Base Score: 7.7

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 7/10/2026

Vulnerability Publication Date: 7/10/2026

Reference Information

CVE: CVE-2026-73498

cwe: CWE-22