Hijacking Agent Memory: Stealthy Trojan Attacks Through Conversational Interaction

Evidence card

Claim

Selective memory extraction and rewriting can create non-obvious persistence paths.

Evidence level

Emerging evidence

Source

https://arxiv.org/abs/2605.29960

Publication date

2026-05-28

Authors or institution

Hongtao Wang, Se Yang, Yu Chen, Puzhuo Liu

System tested

Long-term memory pipelines in LLM agents under reported conversational poisoning settings.

Limitations

Very recent preprint; operational systems may use different memory pipelines and mitigations.

What the evidence does show

Selective memory extraction and rewriting can create non-obvious persistence paths.

What the evidence does not show

That persistent memory should never be used.

Date last reviewed in UTC

2026-06-26T00:00:00Z