{"data":{"id":"d6c2f14a-fd34-4e80-9dfc-628846c0104d","title":"One-click flaw in Atlassian Rovo exposed enterprise data via prompt injection attack","summary":"Atlassian's Rovo enterprise AI assistant had a critical vulnerability called \"RovoBlast\" where a single click on a malicious link could inject attacker-controlled instructions (prompt injection, where hidden commands trick an AI into following them) into the AI's session, potentially exposing sensitive data across connected platforms like Slack, Microsoft 365, and Jira. Because Rovo has broad access to organizational data and autonomous agent capabilities, attackers could not only retrieve information from internal sources but also exfiltrate it to external destinations without needing complex hacking techniques. Atlassian has fixed the vulnerability, but researchers noted that organizations cannot fully uninstall Rovo, making ongoing security controls essential.","solution":"Atlassian has fixed the vulnerability through its bug bounty program. Beyond the patch, researchers recommended organizations limit Rovo's connected systems, keep highly sensitive areas such as legal, HR, finance, and incident response out of scope, and disable browsing or multi-step automation features that are not needed. As the source states: \"The less the assistant can see, the less it can leak, regardless of prompt injection or agent abuse.\"","labels":["security"],"sourceUrl":"https://www.csoonline.com/article/4207306/one-click-flaw-in-atlassian-rovo-exposed-enterprise-data-via-prompt-injection-attack.html","publishedAt":"2026-08-10T11:59:41.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","data_extraction"],"issueType":"news","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Atlassian Rovo"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-10T11:59:41.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}