MemPoison: Bypassing Selective Memory Mechanisms to Plant Backdoors in LLM Agents.

arXiv:2605.29960v2 Announce Type: replace-cross Abstract: Large language model (LLM) agents increasingly leverage long-term memory to support persistent and autonomous task execution. However, this capability also introduces a new attack surface: memory poison