A security update has been released to address a vulnerability in Atlassian products.
The affected product is Bamboo Data Center, and CVE-2026-21589 is an arbitrary file access vulnerability. Arbitrary file access refers to a vulnerability that allows a threat actor to access unauthorized files.
All Affected Versions have been identified.
The issue has been resolved in Bamboo Data Center versions 10.2.24 And 12.1.12.
Atlassian recommends updating to the latest version with the Vulnerability Patch as instructed on the reference site.
