MediumNewsLLM-specific

Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'

Source: Dark Reading(opens in a new tab)
Published: September 24, 2026
Record updated: October 9, 2026

Summary

A prompt-injection flaw has been reported in Manus, an agentic AI app valued at $4 billion. The source states that AI apps that interpret external data need exceptionally rigorous security filters, or attackers can exploit them. The source text gives no further detail on the Manus flaw itself.

Details

Scores and exploitation

Disclosure date: September 24, 2026

Weaknesses and techniques

AI threat technique (MITRE ATLAS): AML.T0051

Classification

Attack type: Prompt injection
Attack sophistication: Trivial
AI component targeted: Agent
Impact: Confidentiality,
Integrity
Labels: security,
industry

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://www.darkreading.com/application-security/prompt-injection-bug-agentic-ai-app-manus

First tracked: September 24, 2026 at 02:01 PM ET, from Dark Reading

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 85% (self-assessed)

Corrections

2026-10-10: Severity changed from high to medium. Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report.

All corrections

Topics

AI agents

Summary

Topics

Related items