{
 "id": "AIR-2026-0187",
 "slug": "cve-2026-77261-ssrf-vulnerability-in-mcp-atlassian-server",
 "title": "CVE-2026-77261: SSRF vulnerability in MCP Atlassian server",
 "summary": "An SSRF vulnerability in the MCP Atlassian server prior to version 0.22.0 allowed sessions to follow redirects without revalidating destinations. The issue was addressed in version 0.22.0 by adding safe redirect hooks.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "MCP Atlassian"
 ],
 "incident_date": "2026-09-22",
 "incident_date_precision": "day",
 "first_reported": "2026-09-22",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77261",
   "publisher": "NVD",
   "title": "CVE-2026-77261: MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).",
   "published_at": "2026-09-22"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-77261",
  "ssrf",
  "mcp"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}