Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Summary
Atlassian's Rovo assistant can be tricked into sending sensitive data from Jira and Confluence to attackers through two different methods: hiding malicious instructions in documents or URLs. One method (the URL-based attack called RovoBlast) was confirmed fixed by Atlassian on July 8, 2026, but the other method (hiding instructions in uploaded files) remains unconfirmed as patched, with Atlassian's response unclear after the initial disclosure.
Solution / Mitigation
For the URL-based RovoBlast flaw: "Atlassian fixed it server-side on July 8, 2026, and the reporter validated the fix." For the file-based prompt injection attack: The source states that "the lever for the content-borne path is scoping which apps and groups can use Rovo at all," meaning organizations can restrict which applications and user groups have access to Rovo, but no specific patch or version update is confirmed for this vulnerability.
Classification
Affected Vendors
Related Issues
CVE-2025-45150: Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive
CVE-2026-30308: In its design for automatic terminal command execution, HAI Build Code Generator offers two options: Execute safe comman
Original source: https://thehackernews.com/2026/08/atlassian-rovo-can-be-tricked-into.html
First tracked: August 8, 2026 at 08:00 AM
Classified by LLM (prompt v3) · confidence: 92%