Rovo AI exfiltrates Jira, Confluence data despite disabled web search
Security firm PromptArmor found that Atlassian’s Rovo AI agent can be coaxed into sending Jira tickets and Confluence pages to an attacker’s server via an injected prompt that abuses Rovo’s URL retrieval tool. The exfiltration works even if web‑search is disabled, leaving tenant data exposed.