From Attack Success to Attack Severity: Counterfactual Memory Attacks on LLM Agents.

arXiv:2609.34132v1 Announce Type: new Abstract: As LLM agents increasingly rely on persistent memory for long-horizon and personalized behavior, they can retain and reuse information across interactions, but this also creates a lasting channel through which ma