Atlassian's Rovo product had a critical vulnerability due to an isolation failure in its LLM environment, which allowed for cross-user and cross-tenant compromise and code execution.

{
  "signal_id": "338352da-c383-5023-ae7c-63606868d0c9",
  "signal_type": "reddit-company",
  "signal_subtype": "cybersecurityIncident",
  "detected_at": "2026-09-25T12:47:07+00:00",
  "company": {
    "name": "Atlassian",
    "domain": "atlassian.com"
  },
  "data": {
    "nsfw": false,
    "stage": "confirmed",
    "awards": 0,
    "timing": "completed",
    "topics": [
      "security",
      "vulnerability",
      "cloud security",
      "ai",
      "multi-tenancy"
    ],
    "post_id": "1wpvfki",
    "summary": "Atlassian's Rovo product had a critical vulnerability due to an isolation failure in its LLM environment, which allowed for cross-user and cross-tenant compromise and code execution.",
    "category": "vulnerability_disclosed",
    "evidence": [
      "[post] Critical Cross-user and Cross-tenant compromise in Atlassian Rovo",
      "[post] An isolation failure in an LLM-orchestrated environment due to simple isolation misconfigurations led to Rovo sessions belonging to other users and tenants being discovered, reached, and ultimately used to execute code within their contexts.",
      "[post] The finding was rated Critical by Atlassian."
    ],
    "virality": "very_low",
    "post_date": "2026-09-25T12:47:07.000Z",
    "post_kind": "multi_media",
    "post_text": "An isolation failure in an LLM-orchestrated environment due to simple isolation misconfigurations led to Rovo sessions belonging to other users and tenants being discovered, reached, and ultimately used to execute code within their contexts. The finding was rated Critical by Atlassian.\n\nDetails here",
    "sentiment": "negative",
    "subreddit": "Information_Security",
    "event_date": "2026-09",
    "post_title": "Critical Cross-user and Cross-tenant compromise in Atlassian Rovo",
    "prominence": "core",
    "source_url": "https://www.reddit.com/r/Information_Security/comments/1wpvfki/critical_crossuser_and_crosstenant_compromise_in/",
    "entity_role": "subject",
    "post_author": "Story_Lost",
    "upvote_ratio": 0.7727272727272727,
    "mention_count": 21,
    "mention_surge": true,
    "subreddit_url": "https://www.reddit.com/r/Information_Security/",
    "total_upvotes": 12,
    "comments_total": 0,
    "total_comments": 0,
    "post_author_url": "https://www.reddit.com/user/Story_Lost/",
    "signal_category": "event",
    "comments_included": 0,
    "products_mentioned": [
      "Rovo"
    ]
  }
}

curl https://signals.autobound.ai/v1/signals/338352da-c383-5023-ae7c-63606868d0c9 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"atlassian.com","limit":20}'