PulseAugur
EN
LIVE 09:10:55

New research reveals memory poisoning attacks on LLM agents

Two new research papers, MemMorph and Evo-Attacker, detail novel methods for attacking Large Language Model (LLM) agents by exploiting their memory systems. MemMorph poisons an agent's long-term memory with crafted records to subtly influence tool selection, achieving high success rates with minimal data. Evo-Attacker uses memory-augmented reinforcement learning to dynamically evolve attack strategies for long-horizon tool manipulation in LLM-based Multi-Agent Systems (LLM-MAS). Both studies highlight the vulnerability of memory modules in LLM agents and underscore the urgent need for robust memory-level security safeguards. AI

IMPACT These studies reveal critical vulnerabilities in LLM agent memory systems, necessitating the development of new security measures to prevent malicious tool hijacking.

RANK_REASON Two academic papers published on arXiv detailing novel attack vectors against LLM agents.

Read on arXiv cs.MA (Multiagent) →

AI-generated summary · Google Gemini · from 3 sources. How we write summaries →

New research reveals memory poisoning attacks on LLM agents

COVERAGE [3]

  1. arXiv cs.AI TIER_1 English(EN) · Xuanye Zhang, Yongsen Zheng, Zhuqin Xu, Kaiyu Zhou, Bowen Shen, Haoran Ou, Tianwei Zhang, Kwok-Yan Lam ·

    MemMorph: Tool Hijacking in LLM Agents via Memory Poisoning

    arXiv:2605.26154v1 Announce Type: cross Abstract: LLM-driven agents are capable of selecting external tools to complete users' tasks. However, attackers could compromise such process, steering agents toward inappropriate/wrong tools and enabling malicious actions. Most existing a…

  2. arXiv cs.AI TIER_1 English(EN) · Bingyu Yan, Xiaoming Zhang, Jinyu Hou, Chaozhuo Li, Ziyi Zhou, Yiming Hei, Litian Zhang ·

    Evo-Attacker: Memory-Augmented Reinforcement Learning for Long-Horizon Tool Attacks on LLM-MAS

    arXiv:2605.25389v1 Announce Type: cross Abstract: While Large Language Model-based Multi-Agent Systems (LLM-MAS) demonstrate remarkable capabilities in solving complex tasks by orchestrating specialized agents and external tools, the implicit trust in tool outputs creates a criti…

  3. arXiv cs.MA (Multiagent) TIER_1 English(EN) · Litian Zhang ·

    Evo-Attacker: Memory-Augmented Reinforcement Learning for Long-Horizon Tool Attacks on LLM-MAS

    While Large Language Model-based Multi-Agent Systems (LLM-MAS) demonstrate remarkable capabilities in solving complex tasks by orchestrating specialized agents and external tools, the implicit trust in tool outputs creates a critical attack surface. Existing tool attacks are limi…