Executive Summary
Varonis found RovoBlast, a critical one-click vulnerability in Atlassian's Rovo AI that could steal Confluence, Jira and SharePoint data.
What Happened
The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data. The post Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data appeared first on SecurityWeek .
Affected Products
- Atlassian Rovo
- Confluence
- Jira
- SharePoint
Vulnerability / Attack Technique
One-click prompt injection leading to data exfiltration
Technical Mechanism
A crafted link or content triggers Rovo to collect connected data and send it out.
AI Security Category
LLM01:2025 Prompt Injection
Part of the Prompt Injection topic.
Relevant Frameworks
RealGround Analysis
Workspace assistants can reach everything the user can. RealGround analysis: scope assistant access and block outbound data paths.
Recommended Controls
- Apply Atlassian's fixes
- Restrict Rovo's connected data sources
- Block assistant requests to external domains
Related RealGround Service
AI Agent Business Logic Audit · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/critical-one-click-vulnerability-in-atlassians-rovo-ai-exposed-enterprise-data/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.