Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CVE-2026-77244: MCP Atlassian lets unauthenticated callers act as operator
CVE-2026-77244 · published 27 days ago
Summary
The MCP Atlassian service used with Confluence and Jira accepted any non‑empty token, meaning a network client could send requests without proving its identity. Those requests would run with the operator’s own Jira or Confluence credentials, allowing read or write actions that the operator can perform. Upgrade to version 0.22.0 or later to enforce proper token verification.
What to do
- Update mcp-atlassian to version 0.22.0.
- Update mcp-atlassian mcp_atlassian to version 0.22.0 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | sooperset | mcp-atlassian | < 0.22.0 |
| pip | – | mcp-atlassian |
< 0.22.0 Fix: upgrade to 0.22.0
|
| – | mcp-atlassian | mcp_atlassian |
< 0.22.0 cpe:2.3:a:mcp-atlassian:mcp_atlassian:*:*:*:*:*:*:*:* |
Original advisory text
[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport accepts requests without a verified user identity and downstream fetcher construction falls back to the operator's globally configured Jira or Confluence credentials. A network client that can reach the MCP endpoint can invoke Atlassian tools as the operator, including read and write operations available to that account. The advisory traces the vulnerable input and processing flow through UserTokenMiddleware, AtlassianOpaqueTokenVerifier, _get_fetcher, and streamable-http, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
References
- https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wrhw-j3f9-8v... Exploit Vendor Advisory
- https://github.com/sooperset/mcp-atlassian/pull/1448 Patch
- https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c28... Patch
- https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0 Release Notes
- https://nvd.nist.gov/vuln/detail/CVE-2026-77244
- https://github.com/advisories/GHSA-wrhw-j3f9-8vc6
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/77xxx/CVE-2026-77244... Vendor Advisory
- https://github.com/sooperset/mcp-atlassian Product
- https://pypi.org/project/mcp-atlassian Product
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-287Improper Authentication
CWE-303Incorrect Implementation of Authentication Algorithm
CWE-862Missing Authorization
Timeline
Published22 Sep 2026
Updated19 Oct 2026
First seen22 Sep 2026
Sources
CVE-2026-77244 · NVD
CVE-2026-77244 · MITRE
GHSA-wrhw-j3f9-8vc6 · GHSA
CVE-2026-77244 · OSV
GHSA-wrhw-j3f9-8vc6 · OSV
PYSEC-2026-4103 · OSV
Track software like this
Free during beta