Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

Security researchers from PromptArmor and Varonis independently discovered vulnerabilities in Atlassian Rovo that allow attackers to exfiltrate Jira and Confluence data via maliciously crafted inputs. Varonis identified a one-click attack using the 'rovoChatPrompt' URL parameter to preload malicious instructions, which Atlassian patched server-side on July 8, 2026. PromptArmor demonstrated an indirect prompt injection via uploaded files that causes Rovo to send sensitive data to attacker-controlled servers, a vector that remains unpatched as of August 5, 2026, with no CVE assigned.

AI-extracted · verify before operational use