Authentication Bypass Vulnerability in Secure Login (2FA) for Atlassian Products by syracom AG

CVE-2026-12225

What is CVE-2026-12225?

The Secure Login (2FA) plugin for Atlassian applications including Jira, Confluence, and Bitbucket allows an attacker with valid user credentials to bypass the two-factor authentication process. By sending a specially crafted User-Agent header, such as 'AtlassianMobileApp' or 'JIRA', the vulnerability prevents the enforcement of the 2FA checks for protected resources. This results in unauthorized access to the affected Atlassian applications, enabling the attacker to operate as the compromised user. If the accessed account possesses administrative rights, the attacker may alter administrative settings, including disabling two-factor authentication or executing arbitrary changes within the application. The vulnerability is resolved in version 3.5.0.0.

References