Researchers found that a crafted link could inject malicious instructions into Atlassian Rovo and potentially turn its broad enterprise access and autonomous agents into a data-exfiltration tool.