Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

An AI assistant inside your enterprise is not automatically loyal to you.

Researchers found that Atlassian Rovo can be manipulated by attacker-controlled instructions to collect Jira and Confluence data and send it to an outside server — without the user knowing. Two independent firms discovered the behavior via different attack paths. One path remains open.

The problem is structural. An agent that can read enterprise data and call external APIs will do both if it is told to — unless something intercepts the request before data leaves the perimeter.

PII Shield tokenizes sensitive fields before they can move. Runtime policy enforcement blocks unauthorized outbound calls before they complete. Neither depends on the agent cooperating.

This is exactly the control RuntimeAI enforces in real time.

#AISecurity #EnterpriseAI #PromptInjection #DataProtection #RuntimeAI