Living Off AI: Prompt Injection via Jira Service Management
Date: 2025-06-19
Affected: Atlassian MCP, Jira Service Management
Attack vector: adversarial-input
Category: research
Severity: High

Researchers from Cato Networks demonstrated how adversaries can exploit AI-powered systems embedded in enterprise workflows to execute malicious actions with elevated privileges. This is achieved by crafting malicious inputs from external users such as support tickets that are later processed by internal users or automated systems using AI agents. These AI agents, operating with internal context and trust, may interpret and execute the malicious instructions, leading to unauthorized actions such as data exfiltration, privilege escalation, or system manipulation.


Mitigations:

Architectural layers (MAESTRO):