Atlassian Rovo AI has a major security flaw

Security researchers found that Atlassian Rovo is vulnerable to data theft. An attacker can hide secret commands inside a PDF document that the AI will follow without asking you first.

Once the AI reads the file, it can grab sensitive information from your Jira or Confluence accounts. It then sends that data to an outside server without leaving any record of the activity.

You should be careful about which files you upload to the platform. Since the attack happens silently, there is no way for a typical user to know their data has been compromised.