# CVE-2026-77244

Unauthenticated MCP server access lets attackers act as operator on Jira/Confluence

- Page: https://www.vulneraibility.com/cve/CVE-2026-77244
- CVSS: 10.0
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.35% (percentile 28.4)
- CISA SSVC: exploitation none, automatable yes, technical impact total (assessed 2026-09-22)
- Weakness: CWE-287, CWE-303, CWE-862
- Also known as: GHSA-wrhw-j3f9-8vc6, PYSEC-2026-4103
- Published: 2026-09-22

## Affected versions

- sooperset mcp-atlassian: affected < 0.22.0

A version outside these ranges is not a statement that it is unaffected.

## Impact

Unauthenticated network requests to MCP can perform read/write actions in Jira/Confluence using operator credentials.

## Action

Immediate action required

## Recommendation

Upgrade to mcp-atlassian v0.22.0, restrict MCP network access, rotate operator credentials

## References

- [other] https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-wrhw-j3f9-8vc6
- [other] https://github.com/sooperset/mcp-atlassian/pull/1448
- [other] https://github.com/sooperset/mcp-atlassian/commit/b041733473f95119dd539542a43c280737a8e460
- [other] https://github.com/sooperset/mcp-atlassian/releases/tag/v0.22.0

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.