Malicious Email Could Hijack AI Agent and Access Connected Accounts

Security researchers have uncovered a now-fixed vulnerability in agentic AI platform Manus that could have allowed attackers to hijack an AI agent through a single malicious email and potentially access a user’s connected accounts. Researchers at Salt Labs, the research arm of Salt Security, found that Manus could interpret malicious instructions embedded within an incoming email and execute them when asked by a user to check their messages. Manus is a general-purpose agentic AI platform capable