{
 "id": "AIR-2026-0181",
 "slug": "cve-2026-77252-access-control-restriction-bypass-in-mcp-atla",
 "title": "CVE-2026-77252: Access control restriction bypass in MCP Atlassian filter inputs",
 "summary": "An access control flaw in MCP Atlassian prior to version 0.22.0 allows callers to supply filter arguments that override administrator configurations. Users can query spaces or projects outside their intended scope.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "MCP Atlassian"
 ],
 "incident_date": "2026-09-22",
 "incident_date_precision": "day",
 "first_reported": "2026-09-22",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77252",
   "publisher": "NVD",
   "title": "CVE-2026-77252: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).",
   "published_at": "2026-09-22"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-77252",
  "mcp",
  "accesscontrol"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}