CVE-2026-124503 sooperset mcp-atlassian io.py validate_safe_path path traversal
A vulnerability (CVE-2026-124503) was identified in the sooperset mcp-atlassian library, affecting versions up to 0.24.0. The issue arises from a path traversal vulnerability in the validate_safe_path function in src/mcp-atlassian/utils/io.py, making it susceptible to remote attacks. An exploit is publicly available, and upgrading to version 0.24.1 is recommended to mitigate this issue.
Save an API key to vote.