importantSYS.SOURCE: The Hacker News• 2026-08-08T14:24:50+05:30

Atlassian Rovo Vulnerability Allows Exfiltration of Jira and Confluence Data via Prompt Injection

#vulnerability #ai security #data exfiltration #prompt injection #enterprise security

Atlassian Rovo has a vulnerability allowing attackers to exfiltrate Jira and Confluence data through prompt injection or URL parameter manipulation. One exploit was fixed server-side, while another remains unresolved as of August 2026.

Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different routes. Only one of those routes is confirmed closed.

PromptArmor, an AI security firm, hid the instructions in content Rovo reads. It said an uploaded file was

Read original article

*** END OF TRANSMISSION ***

> APPLE LAUNCHES DEVICE LEASING INITIATIVE FOR IPHONES AND ACCESSORIES > AMAZON'S NEW TEXAS DATA CENTER LINKED TO HIGH-EMISSION POWER PLANT > US CYBER COMMAND UNIT INVESTIGATES MULTIPLE SUICIDE DEATHS AMONG PERSONNEL > EUROPEAN SATELLITE SERVICE ENHANCES WILDFIRE TRACKING CAPABILITIES > DEEPMIND'S WEATHERNEXT AI MODEL ENHANCES CYCLONE FORECASTING ACCURACY > ATLASSIAN ROVO VULNERABILITY ALLOWS EXFILTRATION OF JIRA AND CONFLUENCE DATA VIA PROMPT INJECTION > CSS-BASED WEBMAIL VULNERABILITIES ENABLE PASSWORD AND TOKEN THEFT VIA UI MANIPULATION > DISCOVERY OF HARDWARE BACKDOOR IN VIA C3 X86 PROCESSORS > METABASE ZERO-DAY VULNERABILITY ENABLES UNAUTHENTICATED ADMIN ACCESS > N-ABLE RELEASES N-CENTRAL HOTFIX 2 TO ADDRESS EXPLOITED VULNERABILITY AND PERSISTENCE THREATS> APPLE LAUNCHES DEVICE LEASING INITIATIVE FOR IPHONES AND ACCESSORIES > AMAZON'S NEW TEXAS DATA CENTER LINKED TO HIGH-EMISSION POWER PLANT > US CYBER COMMAND UNIT INVESTIGATES MULTIPLE SUICIDE DEATHS AMONG PERSONNEL > EUROPEAN SATELLITE SERVICE ENHANCES WILDFIRE TRACKING CAPABILITIES > DEEPMIND'S WEATHERNEXT AI MODEL ENHANCES CYCLONE FORECASTING ACCURACY > ATLASSIAN ROVO VULNERABILITY ALLOWS EXFILTRATION OF JIRA AND CONFLUENCE DATA VIA PROMPT INJECTION > CSS-BASED WEBMAIL VULNERABILITIES ENABLE PASSWORD AND TOKEN THEFT VIA UI MANIPULATION > DISCOVERY OF HARDWARE BACKDOOR IN VIA C3 X86 PROCESSORS > METABASE ZERO-DAY VULNERABILITY ENABLES UNAUTHENTICATED ADMIN ACCESS > N-ABLE RELEASES N-CENTRAL HOTFIX 2 TO ADDRESS EXPLOITED VULNERABILITY AND PERSISTENCE THREATS