What happened
CWE-22 path traversal in the MCP Atlassian server's safe-path validator, so a caller-controlled path escapes the intended directory. CVSS 4.3.
Why it matters
For an agent that reads/writes Atlassian attachments or content, a path-traversal bypass on the safe-path helper can read or write files outside the intended location.
Attack vector
validate_safe_path in src/mcp_atlassian/utils/io.py fails to validate the path argument, allowing path traversal. Public exploit is available.
Affected systems
sooperset mcp-atlassian up to 0.24.0
Mitigation
Upgrade mcp-atlassian beyond 0.24.0 / patch the io.py path validation.