Atlassian Rovo AI Vulnerability Lets Attackers Steal Enterprise Data With a Single Click

{
  "signal_id": "dff1e8ef-1387-579d-45e4-b83c9c2eb056",
  "signal_type": "news",
  "signal_subtype": "security_incident",
  "detected_at": "2026-08-10T11:08:15+00:00",
  "company": {
    "name": "Atlassian",
    "domain": "atlassian.com"
  },
  "data": {
    "url": "https://gbhackers.com/atlassian-rovo-ai-vulnerability/",
    "title": "Atlassian Rovo AI Vulnerability Lets Attackers Steal Enterprise Data With a Single Click - gbhackers.com",
    "excerpt": "RovoBlast is a recently disclosed vulnerability affecting Atlassian’s Rovo AI assistant that allows attackers to expose sensitive enterprise data through a single malicious link. According to Varonis Threat Labs, the vulnerability exploits Rovo’s handling of URL-supplied prompts, enabling attackers to inject malicious instructions into an authenticated user’s AI session. The attack does not require traditional permission bypasses, jailbreaks, or exploits of the victim’s account. Instead, it exploits a parameter-to-prompt (P2P) weakness: Rovo treats text embedded in a URL as a pre-filled chat instruction within a user’s trusted session. Researchers named the issue RovoBlast due to the potentially extensive impact created by Rovo’s integrations and agent capabilities. A crafted link using the `rovoChatPrompt` parameter could open Rovo Chat with attacker-provided instructions preloaded. An example link follows this pattern: When a logged-in employee clicks the link, Rovo may interpret the supplied content as an instruction rather than untrusted external input. Varonis indicated that this creates a low-friction pathway for attackers, allowing the assistant to search, summarize, and possibly move organizational data without obvious warnings or confirmation prompts. Rovo is designed to serve as an AI layer across Atlassian products, including Jira, Confluence, and Bitbucket. It also...",
    "product": "Rovo AI",
    "summary": "Atlassian's Rovo AI assistant was found to have a vulnerability, named RovoBlast, that could allow attackers to expose sensitive enterprise data through a single malicious link.",
    "planning": false,
    "image_url": "https://gbhackers.com/wp-content/uploads/2026/08/fbb4a136-3fd9-4223-a6bd-126a9ef263d0-1.webp",
    "confidence": 0.95,
    "product_data": {
      "name": "Rovo AI",
      "full_text": "Atlassian’s Rovo AI assistant",
      "fuzzy_match": false
    },
    "product_tags": [
      "future_tech",
      "general_technology"
    ],
    "published_at": "2026-08-10T11:08:15Z",
    "vulnerability": "RovoBlast vulnerability exploiting URL-supplied prompts (P2P weakness)",
    "article_sentence": "RovoBlast is a recently disclosed vulnerability affecting Atlassian’s Rovo AI assistant that allows attackers to expose sensitive enterprise data through a single malicious link."
  }
}

curl https://signals.autobound.ai/v1/signals/dff1e8ef-1387-579d-45e4-b83c9c2eb056 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"atlassian.com","limit":20}'