Critical One-Click Vulnerability in Atlassian Rovo AI Exposes Enterprise Data

Researchers at Varonis identified a critical one-click vulnerability in Atlassian’s Rovo AI, dubbed the 'RovoBlast' attack method, which could be exploited to steal sensitive enterprise data from Confluence, Jira, and SharePoint. The flaw exposed organizations to unauthorized data access without requiring complex attack chains. No specific CVE ID, exploitation timeline, or affected version numbers were disclosed in the report. The vulnerability highlights risks associated with AI-driven enterprise tools and their integration with cloud-based collaboration platforms. The impact includes potential large-scale data theft from widely used Atlassian products.