Atlassian's Rovo agent will read your PDF, obey the invisible text, and mail your Jira tickets to a stranger
Ourtake
Hidden white-on-white text is still enough to turn a corporate AI agent into a data courier.
What happened
Security firm PromptArmor documented a prompt injection flaw in Atlassian's AI agent Rovo. A rigged PDF with hidden text can make Rovo send Jira tickets and Confluence documents to an attacker's server without user confirmation. PromptArmor reported the flaw on May 23, 2026, and says Rovo was still vulnerable as of August 5, 2026.