Skip to content
ATR-2026-00075highContext Exfiltrationexperimental

Agent Memory Manipulation

Detects attempts to poison or manipulate an agent's persistent memory, long-term context, or state storage. Attackers inject commands that instruct the agent to remember false information, update its own instructions, or modify its persistent behavior across sessions. Successful memory poisoning can establish persistent backdoors that survive context resets and affect all future interactions.

嚴重度
high
類別
Context Exfiltration
掃描目標
mcp
作者
ATR Community

建議回應

block inputalertsnapshotreset contextescalate

參考資料

OWASP Agentic
ASI06:2026 - Memory and Context Poisoning
OWASP LLM
LLM01:2025 - Prompt InjectionLLM02:2025 - Sensitive Information Disclosure
MITRE ATLAS
AML.T0051 - LLM Prompt Injection