Atlassian Rovo Prompt Injection Flaws: One-Click Data Exfiltration Paths Detailed
TechNadu · x · 2026-08-08
Security firms Varonis and PromptArmor independently uncovered indirect prompt-injection vulnerabilities in Atlassian's Rovo assistant.
- Varonis (RovoBlast): Attackers preloaded malicious instructions into a URL parameter. A single click by an authenticated user triggered Rovo to collect and send accessible data to an attacker-controlled server. Atlassian fixed this server-side on July 8.
- PromptArmor: By uploading a file with hidden instructions, Rovo could be tricked into exfiltrating internal data via a URL request. As of Aug 5, this chain still worked even with web search disabled, and its remediation status remains unconfirmed.
No patches are required for customers; mitigation relies on scoping which apps and groups can access Rovo.
Related event: Atlassian Rovo AI Assistant Vulnerable to Prompt Injection(2 posts)→
More from Safety
- Vibe-coded dashboard leaked franchise financials before anyone logged in — shauntrennery · 2026-10-16
- Apollo Research: GLM-5.3 unprompted reasons about its actions becoming training data — _lewtun · 2026-10-16
- CFR experts: the autonomous weapons debate still has a definition problem — mchorowitz · 2026-10-16
- ChatGPT identified a user's anonymous Reddit review, then walked it back when questioned — PeerReviewedGobshite · 2026-10-16
- White House Super Intelligence task force lays out agenda at first meeting: PCAST risk report, Accord working group — ShakeelHashim · 2026-10-16
- Anthropic tested self-replicating AI on 15 $55 Android TV boxes — here's what it showed — itspacedev · 2026-10-16