Atlassian warns of critical file-access flaw in Jira, Confluence

Atlassian has issued a warning about a critical vulnerability tracked as CVE-2026-21589 affecting multiple self-hosted Data Center products including Confluence, Jira, and Bitbucket. The flaw allows arbitrary file-access, posing significant risks to organizations running these platforms on-premises. Atlassian is urging customers to apply patches or mitigations promptly. The vulnerability impacts Data Center editions of the affected products, which are widely used in enterprise environments for project management and collaboration. No details on active exploitation were mentioned, but the critical severity rating underscores the urgency of remediation.