GHSA-g5r6-gv6m-f5jv: mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment

July 10, 2026 (updated July 17, 2026)

confluence_upload_attachment passes file_path directly to open(file_path, "rb") with no path validation. Any authenticated MCP client — or an AI agent manipulated via prompt injection — can read any file the server process can access and exfiltrate it to Confluence as an attachment.

References

github.com/advisories/GHSA-g5r6-gv6m-f5jv
github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460
github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0
github.com/sooperset/mcp-atlassian/security/advisories/GHSA-g5r6-gv6m-f5jv

Code Behaviors & Features

Detect and mitigate GHSA-g5r6-gv6m-f5jv with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →