On: Atlassian Rovo Exfiltrates Data, Bypassing Controls

[stephbook]

What's so hard about having the LLM tool calls scoped to the tenant? Inject "X-Scope-I" after the LLM decided on a tool call and you're done. Easiest fix ever.

[_HMCB_ → stephbook]

Famous last words: easy fix.

[hnlmorg → _HMCB_]

The Rovo MCP server manages scope credentials securely with “bring your own LLM”. Yet somehow they still fucked up with their own agent

[Ekaros → stephbook]

At some point LLM forgetting to check the scope? On the nth automated rewrite. Everything else works. It might even test for test case. But not in production...