Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:atlassian:mcp-Atlassian:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Authentication Bypass in mcp-atlassian HTTP Transport

The mcp-atlassian package contains an authentication bypass vulnerability (CVE-2026-77244) that allows unauthenticated network-adjacent attackers to execute tools using the operator's Jira and Confluence credentials.

mcp-atlassian +1 authentication-bypass api-security atlassian mcp path-traversal ai-security exfiltration vulnerability +9
1r 8t 2c