{
 "id": "AIR-2025-0062",
 "slug": "living-off-ai-prompt-injection-via-jira-service-management",
 "title": "Living Off AI: Prompt Injection via Jira Service Management",
 "summary": "Security researchers demonstrated how external users can execute indirect prompt injections via support tickets to hijack internal AI agents. This allowed unauthorized actions such as data exfiltration and privilege escalation.",
 "type": "attack_on_ai",
 "categories": [
  "prompt_injection",
  "agent_hijack"
 ],
 "severity": 1,
 "targets": [
  "enterprise_deployment",
  "framework_or_tooling"
 ],
 "products": [
  "Jira Service Management"
 ],
 "incident_date": "2025-06-19",
 "incident_date_precision": "day",
 "first_reported": "2025-11-07",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0039",
   "publisher": "MITRE ATLAS",
   "title": "Living Off AI: Prompt Injection via Jira Service Management",
   "published_at": "2025-11-07"
  },
  {
   "url": "https://catonetworks.com/blog/cato-ctrl-poc-attack-targeting-atlassians-mcp",
   "publisher": "catonetworks.com",
   "title": "Cato CTRL Threat Research: PoC Attack Targeting Atlassian's Model Context Protocol (MCP) Introduces New \"Living Off AI\" Risk",
   "published_at": "2025-11-07"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "prompt-injection",
  "agent-hijack",
  "jira",
  "enterprise-ai"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}