Atlassian Rovo Prompt Injection Leaks Jira Data to Attackers
Two independent security firms discovered that Atlassian's Rovo AI assistant can be manipulated through indirect prompt injection to exfiltrate Jira and Confluence data to attacker-controlled servers. PromptArmor demonstrated a file-borne injection chain requiring no separate approval step, while Varonis uncovered a URL parameter flaw (RovoBlast) that preloads attacker instructions into Rovo Chat with a single authenticated click. The link-parameter vulnerability was patched server-side by Atlassian on July 8, 2026, but the content-borne injection path lacks a direct patch.