InjecMEM: Memory Injection Attack on LLM Agent Memory Systems
Memory is becoming a default subsystem in deployed LLM agents to provide persistent personalization and continuity. This naturally prompts a question: will memory system introduce new vulnerabilities into agents? Thus we propose InjecMEM, a novel memory injection attack paradigm that requires only a single interaction (no read/edit access to memory store) to steer later responses of related queries toward a pre-specified output. Guided by the retrieval-then-generate mechanism of memory systems, we craft the injection with a retriever-agnostic anchor and an adversarial command. The anchor conta
Lineage graph
Paper → model → repo connections mined from source citations (Tier-1 exact match).
Why these links exist
Every edge carries a method, confidence, and the source snippet that justified it — so bad links are debuggable.
- FuzzySimilar title/name (fuzzy) · 59%AgentCore-8B →
“Fuzzy title match (0.73): “InjecMEM: Memory Injection Attack on LLM Agent Memory System” ≈ “AgentCore-8B””
- PossiblePossibly related (embedding) · 69%MemoryOps AI: governed memory runtime for LLM agents with deletion-leakage evals and context admission [P] →
- PossiblePossibly related (embedding) · 58%Defending against Prompt Injection with Structured Queries (StruQ) and Preference Optimization (SecAlign) →
- PossiblePossibly related (embedding) · 58%A system-level approach to prompt injection: separating instruction and data channels in LLM agents [P] →
- FuzzySimilar title/name (fuzzy) · 87%SWE-agent/SWE-agent →
“Fuzzy title match (0.94): “InjecMEM: Memory Injection Attack on LLM Agent Memory System” ≈ “SWE-agent/SWE-agent””
- FuzzySimilar title/name (fuzzy) · 87%zhayujie/CowAgent →
“Fuzzy title match (0.94): “InjecMEM: Memory Injection Attack on LLM Agent Memory System” ≈ “zhayujie/CowAgent””
- FuzzySimilar title/name (fuzzy) · 66%TencentCloud/TencentDB-Agent-Memory →
“Fuzzy title match (0.78): “InjecMEM: Memory Injection Attack on LLM Agent Memory System” ≈ “TencentCloud/TencentDB-Agent-Memory””
- FuzzyOverlapping authors or contributors · 62%ray-project/ray →
“Shared author/contributor keys: wang”