THREATOPS
THREAT OPSThreat News › How Prompt Injection Exposes Manus' VS Code Server to the Internet

How Prompt Injection Exposes Manus' VS Code Server to the Internet

lowembracetheredPublished 2025-08-25

<a id="top_ref"></a>

<p>Today we will cover a powerful, easy to use, autonomous agent called Manus. <a href="https://en.wikipedia.org/wiki/Manus_(AI_agent)">Manus</a> is developed by the Chinese startup <a href="https://manus.im/privacy">Butterfly Effect</a>, headquartered in Singapore.</p> <p>This post demonstrates an end-to-end indirect prompt injection attack leading to a compromise of Manus&r

Indicators of compromise

Original source: https://embracethered.com/blog/posts/2025/manus-ai-kill-chain-expose-port-vs-code-server-on-internet/