An isolation failure in Atlassian Rovo's LLM-orchestrated environment caused sessions from different users and tenants to be accessible and exploitable across boundaries. Due to simple misconfigurations, attackers could discover and use other users' sessions to execute code within their contexts. This cross-user and cross-tenant compromise is rated critical. The problem reflects a regression in AI security practices, where direct user access to systems built on flawed isolation mechanisms leads to severe vulnerabilities.

Attackers can access and execute code within other users' and tenants' sessions, potentially leading to unauthorized data access, privilege escalation, and compromise of multiple tenants in a shared environment. This undermines the confidentiality and integrity of user sessions and tenant isolation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using affected Rovo environments for sensitive operations. Monitor vendor communications for updates on patches or configuration changes that address the isolation failure.