InjecMEM

A single prompt plants instructions that steer an agent's answers in later sessions

Researchers at Shanghai Jiao Tong University and Ant Group report up to 76.6% attack success against an agent memory system without ever touching the store, which moves the problem from filtering inputs to trusting stored state.