GHSA-g5r6-gv6m-f5jv: mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment

July 10, 2026 (updated August 12, 2026)

confluence_upload_attachment passes file_path directly to open(file_path, "rb") with no path validation. Any authenticated MCP client — or an AI agent manipulated via prompt injection — can read any file the server process can access and exfiltrate it to Confluence as an attachment.

References

github.com/advisories/GHSA-g5r6-gv6m-f5jv
github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460
github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0
github.com/sooperset/mcp-atlassian/security/advisories/GHSA-g5r6-gv6m-f5jv
nvd.nist.gov/vuln/detail/CVE-2026-73498

Code Behaviors & Features

Detect and mitigate GHSA-g5r6-gv6m-f5jv with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →