CVE-2021-26067: Atlassian Bamboo

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk and if certain files exists on the tmp directory, via a Sensitive Data Exposure vulnerability in the /chart endpoint. The affected versions are before version 7.2.2.

Affected products

• Atlassian Bamboo: before 7.2.2 (fixed in 7.2.2)

Published 2021-01-28. Last modified 2026-06-17.