What we found ๐
๐ง Agent memory can turn one-time prompt injections into persistent compromises
๐ Attacks can survive across sessions in sliding-window and RAG-based agents
๐ ๏ธ Compromised agents may later misuse tools or leak sensitive data
Can self-improving AI agents become a security risk? ๐ง
In our new paper, we study how LLM agents that learn from experience can also absorb malicious instructions from untrusted content, creating persistent safety risks across sessions. ๐งโโ๏ธ๐ค
๐ Paper: https://t.co/0mntIrGMpm