
The Off Switch That Wasn't: How Atlassian Rovo Leaks Data With Web Search Disabled
A disabled setting that changes the UI but not the capability is a false control. PromptArmor demonstrated Atlassian Rovo leaking Jira/Confluence data via prompt injection — even with web search off.












