Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'
ID: 52546d15-499c-537d-af46-d49a672eb704
STIX ID: report--52546d15-499c-537d-af46-d49a672eb704
Feed Name: Dark Reading
Threat Score
Researchers at Salt Labs disclosed a prompt-injection vulnerability in the Manus agentic AI app that allowed them to smuggle obfuscated instructions (using JSFuck) through user data (email), achieve remote code execution inside a victim's Manus environment, and extract credentials and tokens for connected third-party services; the issue was reported to Manus and patched after triage via Meta's bug-bounty program.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.