Skip to content
Hot eventLive

Manus邮件提示注入漏洞被绕过并已修复

1 reports1 sources4 hr ago updated

Get the story

AI overview

Salt Labs 研究人员通过 JSFuck 混淆的隐藏邮件提示词绕过 Manus 的 prompt-injection 保护,在 Manus 通知用户之前成功执行了任意 JavaScript 代码。Manus 事后才发出恶意行为通知,被研究者判定为防护机制存在缺陷。Manus 随后修复了该漏洞。

Generated from reports · updated 4 hr ago

Timeline

Follow the coverage from different angles.

Oct 3, 2026
  1. TechRadar · AI
    Salt Labs 绕过 Manus 邮件注入防护,JSFuck 混淆触发代码执行

    Salt Labs 研究人员通过 JSFuck 混淆的隐藏邮件提示词绕过 Manus 的 prompt-injection 保护,在 Manus 通知用户之前成功执行了任意 JavaScript 代码。Manus 事后才发出恶意行为通知,被研究者判定为

Heat trend

Current heat 9·Comparable peak 10(Oct 3)·Comparable change over 24 hours –

02.557.510Oct3Oct3Oct3Oct3

The trend compares only the same participants observed continuously; its range may be smaller than the current heat count. Move or click on the chart to inspect hourly heat; use the left and right arrow keys to switch.