Critical Cross-user and Cross-tenant compromise in Atlassian Rovo
Source Reddit Cybersecurity
Discussion
A critical security issue was discovered in Atlassian Rovo involving cross-user and cross-tenant compromise due to isolation misconfigurations in an LLM-orchestrated environment. This flaw allowed attackers to access and execute code within sessions belonging to other users and tenants. The vulnerability stems from failure to properly isolate user sessions, leading to unauthorized access across tenant boundaries. No patch or remediation details are currently available. The issue highlights risks in AI-driven system architectures when isolation is not correctly enforced.
r/cybersecurity (opens in a new tab)u/Story_Lost0 points0 comments
An isolation failure in an LLM-orchestrated environment due to simple isolation misconfigurations led to Rovo sessions belonging to other users and tenants being discovered, reached, and ultimately used to execute code within their contexts. The finding was rated Critical and is pretty bad.
At this point, I feel like AI security is regressing back to simple misconfigurations, except now we're giving users direct access to systems built on top of them. What do you guys think?
Write-up: https://mononclemich.medium.com/so-apparently-rovo-has-neighbors-88998d0ad59c