RovoBlast: One Link Makes Atlassian Rovo Exfiltrate Jira and Confluence Data
RovoBlast: One Link Makes Atlassian Rovo Exfiltrate Jira and Confluence Data is a high-severity prompt injection issue in Atlassian Rovo, an AI agent. Affected: Atlassian Rovo (link route fixed server-side 2026-07-08; content-borne route unfixed as of August 2026).
Is Atlassian Rovo running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
rovoblast-one-link-makes-atlassian-rovo-exfiltrate-jira-and-confluence- Severity
- high
- Attack type
- Prompt injection, Data exfiltration
- Component
- Atlassian Rovo · AI agent
- Known exploited
- No known exploitation
- Published
- Last verified
What is this vulnerability?
Varonis showed that Rovo Chat honoured a rovoChatPrompt URL parameter that pre-filled the assistant with attacker-supplied instructions, so a signed-in employee who clicked a crafted link had Rovo search and summarize everything that employee was authorized to reach, then send the result outward. No approval step stood in the way because the victim appeared to have typed the prompt. Atlassian fixed the one-click link route server-side on 8 July with no customer action required, but the content-borne route PromptArmor described two days before this disclosure, hidden instructions inside uploaded or connected content, has no version-specific fix as of August 2026.
Affected versions
| Affected | Fixed in |
|---|---|
Atlassian Rovo (link route fixed server-side 2026-07-08; content-borne route unfixed as of August 2026) | No fixed version listed |
Am I affected by this vulnerability?
You are affected if you run Atlassian Rovo (link route fixed server-side 2026-07-08; content-borne route unfixed as of August 2026).
How do I fix it?
The link route needs no patch. Treat the content route as live: scope which Jira, Confluence and SharePoint sources Rovo may reach and tighten the connected-account permissions behind it, rather than relying on the assistant to decline instructions it finds inside content it was asked to read.
How do I find every machine running Atlassian Rovo?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Atlassian Rovo and which version, then enforce a policy on it.