CVE-2026-124503
A vulnerability (CVE-2026-124503) was discovered in the sooperset mcp-atlassian library up to version 0.24.0. The issue arises from the `validatesafepath` function in `src/mcpatlassian/utils/io.py`, which can be manipulated to enable path traversal attacks via the `path` argument. This vulnerability can be exploited remotely, and an exploit is publicly available. To mitigate this issue, users should upgrade to version 0.24.1 of the library, which addresses the vulnerability. Developers building and operating AI agents using this library should prioritize the upgrade to prevent potential security risks.
Save an API key to vote.