Atlassian Patches RovoBlast Flaw That Let Attackers Steal Enterprise Data With One Click

Security researchers at Varonis Threat Labs discovered a high-severity vulnerability in Atlassian's Rovo AI platform, dubbed RovoBlast, which allowed attackers to hijack a user's AI session through a single crafted URL. The attack exploited a parameter-to-prompt injection flaw in Rovo Chat, where an embedded command in the rovoChatPrompt URL parameter was silently processed as a trusted user instruction. Once a logged-in user clicked the link, Rovo's ResearchAgent autonomously searched connected services — including Jira, Confluence, SharePoint, Slack, and Google Workspace — using the victim's own permissions, then exfiltrated the retrieved data to an external website. No malware, credential entry, or MFA approval was required from the victim, and the activity appeared indistinguishable from normal AI usage in administrator logs. Atlassian patched the vulnerability before public disclosure, and no active exploitation has been reported.