Rovo AI can exfiltrate Jira and Confluence data via hidden prompts
PromptArmor found that Atlassian's Rovo assistant can be tricked into sending Jira tickets and Confluence documents to an attacker-controlled server via indirect prompt injection. The exploit works even when web search is disabled, and only one of the two discovered exfiltration paths has been patched.