Atlassian Rovo Prompt Injection Exfiltrates Jira and Confluence Data Without User Approval

Cybersecuritynews •Abinaya • August 10, 2026

RovoBlast is a one-click prompt-injection vulnerability in Atlassian Rovo that could allow attackers to exfiltrate sensitive enterprise data from Jira, Confluence, SharePoint, and other connected services. Atlassian addressed the reported URL-based issue on the server side after responsible disclosure, with the fix deployed on July 8, 2026. Rovo is Atlassian’s enterprise AI assistant, designed to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

RovoBlast Vulnerability Exposes Enterprise Data via One-Click Attack Atlassian's Rovo AI assistant was found vulnerable to a one-click prompt injection attack, dubbed RovoBlast, which allows attackers to inject malicious instructions into authenticated user sessions. This vulnerability was disclosed by Varonis Threat Labs at DEF CON 34 and affects Rovo's integration with services like Jira, Confluence, and Slack. The attack can exfiltrate sensitive data without user approval, as Rovo's browsing agent autonomously retrieves and posts internal content externally. The flaw was reported to Atlassian, which has since deployed a fix on July 8, 2026. However, Rovo's inability to be fully uninstalled means organizations still face risks. Researchers recommend limiting Rovo's access and monitoring its activity to mitigate potential threats. 4 sources 71

Extracted Entities

Atlassian Rovo Prompt Injection Exfiltrates Jira and Confluence Data Without User Approval

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Platforms (3)

Vulnerabilities (1)