Atlassian Built an AI Agent That Hands Your Data to Attackers. They Shipped It Anyway.
Atlassian Rovo’s URL retrieval tool has zero validation or access controls, letting attackers trick the AI into exfiltrating sensitive data through crafted URLs. But the real story isn’t the bug — it’s a fundamental design failure where Atlassian prioritized shipping an AI agent over basic security, assuming autonomous agents could safely handle internal data without human oversight. Every organization using Jira or Confluence with Rovo enabled is at risk.