CVE-2026-77262
8.6 · HighArbitrary file read in MCP Atlassian through confluence_upload_attachment
MCP Atlassian opened any file_path passed to its Confluence upload tool, so a caller could read host files and push them out as attachments.
Domain
MCP servers
Model Context Protocol servers: every tool argument can come from a prompt-injected agent.
3 write-ups, 3 vulnerabilities
CVE-2026-33980
8.3 · HighKQL injection in Azure Data Explorer MCP Server through table_name
Three metadata tools of adx-mcp-server pasted table_name into KQL, letting an agent run arbitrary queries without going through execute_query.
CVE-2026-32247
8.1 · High
Cypher injection in Graphiti through search filter node labels
Graphiti pasted search filter node labels into raw Cypher, allowing a caller to bypass group filtering; writes depend on the database route and permissions.
Vulnerabilities
| Identifier | Product | Vulnerability | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-77262 | MCP Atlassian | Path traversal in confluence_upload_attachment | 8.6 High | |
| CVE-2026-33980 | Azure Data Explorer MCP Server | KQL injection through table_name in three metadata tools | 8.3 High | |
| CVE-2026-32247 | Graphiti | Cypher injection through SearchFilters.node_labels | 8.1 High |