Fetching from the wire…
Security2026-08-06 · source-backed
PromptArmor went public August 5 (248 points on HN) after Atlassian went silent. Rovo's URL-retrieval tool has no protection against URLs the agent itself generates, so indirect prompt injection reaches anything behind its connectors. Disabling web search doesn't help: it removes the search tool but leaves the tool that opens search results. Timeline is disclosed May 23, acknowledged May 25, follow-ups June 4 and July 29, then nothing. No CVE. Still vulnerable. Incumbent AI features are shipping with less security review than the products they're bolted onto, and this is the receipt.
Each link below shares sources, entities, or timing with this story.
Atlassian released Rovo / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Atlassian released Rovo); both cover Atlassian, August, Jira, July; overlapping topics (against, agent, atlassian).
Linked by a graph relationship (Atlassian released Rovo); both cover Atlassian, Confluence, Jira; overlapping topics (agent, atlassian, confluence, connector).
Linked by a graph relationship (Atlassian released Rovo); both cover Atlassian, Confluence, Jira; overlapping topics (agent, atlassian, confluence).
Atlassian released Rovo / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Atlassian released Rovo); both cover Atlassian, Rovo; overlapping topics (against, atlassian, data, rovo).
Codex supports Atlassian Rovo / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Codex supports Atlassian Rovo); both cover July, URL; overlapping topics (against, agent, tool).
Atlassian released Rovo / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Atlassian released Rovo); both cover Atlassian, Rovo; overlapping topics (agent, atlassian, tool).
Linked by a graph relationship (Atlassian released Rovo); both cover Jira, Rovo; overlapping topics (agent, atlassian).
Atlassian released Rovo / Shared entity: Atlassian / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Atlassian released Rovo); both cover Atlassian; overlapping topics (against, agent, atlassian).