A Vulnerability in Atlassian Data Center Products Could Allow for Arbitrary File Access

A vulnerability in Atlassian Data Centerproducts could allow for arbitrary file access. Atlassian Data Center products are self-managed, enterprise-grade editions of Atlassian tools such as Jira, Confluence, Bitbucket, and Jira Service Management, which organizations host on their own infrastructure or private cloud and which offer clustering, high availability, and greater control over data, security, and scaling. Successful exploitation of this vulnerability could allow for arbitrary file access.

There are reports of this vulnerability being exploited in the wild.

A vulnerability in Atlassian Data Centerproducts could allow for arbitrary file access. Details of the vulnerability are as follows:

Tactic:Initial Access(TA0001)

Technique:Exploit Public-Facing Application(T1190)

Successful exploitation of this vulnerability could allow for arbitrary file access.

We recommend the following actions be taken:

Copyright©2026 Center for Internet Security®