Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection

Atlassian has issued a high-priority advisory for Bamboo Data Center disclosing a critical OS command-injection RCE (CVE-2026-21571, CVSS 9.4) that enables authenticated attackers to execute arbitrary OS commands and fully compromise CI/CD servers; multiple release branches are affected and Atlassian recommends immediate upgrades to specified fixed minimum versions (e.g., 9.6.25, 10.2.18, 12.1.6) to mitigate severe supply-chain and credential exposure risks.