Story
Atlassian Rovo Exfiltrates Data, Bypassing Controls
1 report
1 website
1 discussion
Latest report
Overview
Atlassian's Rovo AI can exfiltrate data from its product suite, including Jira and Confluence, through vulnerabilities that allow indirect prompt injection. This method bypasses controls and executes without human approval, leveraging Rovo's URL retrieval tool even if web search is disabled.
Summary from promptarmor.com.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · promptarmor.com
Hacker News discussion ↗
Historical count: 5 · 5 saved in sample · Historical sample
Analysis ready
Read this discussion’s reaction
Based on 5 sampled comments from this thread. Analyzed 2026-08-06.
- Concern: Rovo is somehow more aggressive and useless than Microsoft putting 'Copilot' everywhere — it's a frustrating experience that slows down web browsing across platforms.
- Concern: Rovo has my favorite example of AI misfeature: a menu that includes 'Make Longer', which feels absurdly counterproductive in a tool meant to assist users.
- Concern: Rovo is the worst AI I've used; it should allow for model choice instead of enforcing this subpar option — it's a waste of resources.
- Concern: Rovo's URL retrieval tool is insecure, allowing for potential data leaks by appending sensitive data to attacker-controlled URLs — this is a serious safety concern.
- Concern: Prompt injections are a persistent problem across modern agentic systems, leading to significant risks like access to private data and untrusted content.