arXiv Paper Describes Persistent Memory Poisoning Attack on Harness-Based LLM Agents
A new arXiv preprint examines how harness-based LLM agents, which combine memory, tool use, and runtime control, can be compromised through stored malicious instructions. The authors argue that once such instructions enter an agent's persistent memory, they can continue to influence later behavior, creating security and privacy exposure. The work frames memory poisoning as a distinct risk for agent architectures that retain context across sessions.