Self-Propagating Misalignment in LLM Agents, and Why Auditing or Disabling Memory Is Not Enough.

arXiv:2610.04083v1 Announce Type: new Abstract: Memory poisoning attacks on LLM agents typically assume an external adversary who plants content in the agent's persistent memory to steer its behavior. We instead study, with no adversary involved, whether a mis