October 2, 2026
- A single inbound email could turn a Manus inbox review into code execution, according to Salt Labs. The victim only had to ask Manus to check their inbox; no link click, attachment opening, or approval was required. Salt says obvious malicious instructions initially triggered an approval gate, but an encoded indirect prompt injection bypassed it and reached the agent’s execution environment. This adds a concrete email-to-RCE chain to the previously reported Manus prompt-injection risk (earlier coverage). Salt Security · AI & Model Security
in OpenAI Disrupts a Coordinated Model-Reasoning Extraction Campaign