arXiv AI July 7, 2026 By Yechao Zhang, Shiqian Zhao, Jiawen Zhang, Jie Zhang, Gelei Deng, Xiaogeng Liu, Chaowei Xiao, Tianwei Zhang

When Claws Remember but Do Not Tell: Stealthy Memory Injection in Persistent Personal Agents

Read the original on arXiv AI →

arXiv:2607. 05189v1 Announce Type: cross Abstract: Persistent personal agents combine long-term memory with access to users' external environments, enabling personalized foreground assistance and proactive background execution.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

arXiv AI

4d ago

Trojan Hippo Bench: A Dynamic Benchmark for Persistent Memory Attacks and Defenses in LLM Agents

arXiv:2605.01970v4 Announce Type: replace-cross Abstract: Memory systems enable otherwise stateless LLM agents to persist user information across sessions, but also introduce a new attack surface. Th...

By Debeshee Das, Julien Piet, Darya Kaviani, Luca Beurer-Kellner, Florian Tram\`er, David Wagner

llms rag agents multimodal benchmarks safety

arXiv AI

Jul 9

When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents

arXiv:2607. 06595v1 Announce Type: cross Abstract: Personal AI agents powered by large language models can reason and act using available tools to access emails, manage calendars, and push code to remote repositories, all with minimal oversight.

By George Torres, Sharad Shrestha, Satyajayant Misra

llms agents benchmarks

arXiv AI

Sep 15

When Malicious Instructions Persist: Persistent Memory Poisoning Attack on Harness-Based Agents

arXiv:2609.13889v1 Announce Type: cross Abstract: Harness design has transformed the development of LLM-based agents by integrating memory, tool use, and runtime control. However, this design also in...

By Shuhuai Huang, Jingfeng Zhang, Hong Jia

llms agents multimodal safety

arXiv AI

Jul 17

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems

arXiv:2607. 14611v1 Announce Type: cross Abstract: A growing class of agentic systems maintain persistent state across sessions through memory files, behavioral preferences, and knowledge bases.

By Soham Gadgil, David Alexander, Sai Sunku, Franziska Roesner

llms agents safety

arXiv AI

Jun 6

Beyond Similarity: Trustworthy Memory Search for Personal AI Agents

arXiv:2606. 06054v1 Announce Type: new Abstract: Personal AI agents increasingly rely on long-term memory to provide persistent personalization across sessions.

By Jiawen Zhang, Kejia Chen, Jiachen Ma, Yangfan Hu, Lipeng He, Yechao Zhang, Jian Liu, Xiaohu Yang, Tianwei Zhang, Ruoxi Jia

llms agents

arXiv AI

Jul 31

MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair

arXiv:2607. 27080v1 Announce Type: cross Abstract: Memory systems allow agents to retain and reuse information from past interactions, but they can also let malicious content persist.

By Xuanze Chen, Xukang Xie, Wentao Fu, Jiajun Zhou, Shanqing Yu, Qi Xuan

llms agents benchmarks

One email a morning, machine-written

Related stories

Trojan Hippo Bench: A Dynamic Benchmark for Persistent Memory Attacks and Defenses in LLM Agents

When Agents Remember Too Much: Memory Poisoning Attacks on Large Language Model Agents

When Malicious Instructions Persist: Persistent Memory Poisoning Attack on Harness-Based Agents

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems

Beyond Similarity: Trustworthy Memory Search for Personal AI Agents

MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair