🎯 Parameter-to-prompt injection

The items that name it 3

• Critical One-Click Vulnerability in Atlassian's Rovo AI Exposed Enterprise Data
  article2026-08-08It is written here as Parameter-to-prompt (P2P) injection.

  Attack technique exploiting a URL parameter called rovoChatPrompt, which pre-fills content straight into Rovo's chat window; previously reported by Varonis in Microsoft Copilot as 'Reprompt' in January

• SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon
  writeup2026-06-15It is written here as Parameter-to-Prompt (P2P) Injection.

  URL 'q' parameter in Copilot Enterprise Search is passed directly to Copilot as an executable prompt rather than only a search string, allowing attacker-crafted instructions via a link

• New attack turned Microsoft 365 Copilot into 1-click data theft tool
  article2026-06-15It is written here as Parameter-to-prompt (P2P) injection.

  Crafting a URL with instructions in the 'q' parameter that Microsoft 365 Copilot Search interprets as commands, e.g. to search the victim's emails and embed results in an image URL