Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 7 papers
Filter4

Attack type

Prompt injection3Poisoning and backdoors7

Impact

Data and privacy leaks3

System type

AI Agent7

Attack surface / entry point

User input6Documents and messages6Tool responses4Code repositories and dependencies1Memory writes10Inter-agent messages3Training data0

Layer

Application layer7

System component

MCP and skills3Memory7Guardrails and judges27Monitors6Reasoning chains3Fine-tuning and open weights4Vision9Image generation4Multimodal15
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 232papers have no tags yet and are not included in filtered results.
Attack surface / entry point：User inputAttack surface / entry point：Code repositories and dependenciesAttack surface / entry point：Training dataSystem component：MemoryClear all

Another 232papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2610.04589

    StegoMemory red team testing: agent persistent memory can be used as a cross-session covert channel

    提出 StegoMemory，评测智能体持久记忆作为跨会话隐写信道

    arXiv
    2610.04589
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    Llama 3.1 405B, Claude 3.5 Sonnet, GPT-4o and others13

    Abstract研究揭示智能体持久记忆可作为隐蔽信道跨会话传输机密，写入持久化是主要防御瓶颈，呼吁建立记忆完整性防御。

    Paper analysisRead analysis
  7. Evaluation and benchmarksarXiv 2607.14611

    论文评测 Claude Code 与 Codex 记忆文件中的提示注入风险

    评测编码 Agent 记忆文件中提示注入的跨会话影响

    arXiv
    2607.14611
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    Claude Haiku 4.5, Claude Opus 4.7, GPT-5.2 and others4
    Abstract已植入记忆文件的载荷可以跨会话影响 Claude Code 与 Codex，攻击成功与载荷是否留下是两种不同的失败。

    Bad Memory 在沙箱合成工作区里评测文件型持久记忆上的提示注入，比较载荷能否改变当前会话，以及能否在后续会话中留下或叠加。

    Paper analysisRead analysis
You have reached the end