MemoryGraft: Practical Memory Injection Attack against LLM Agents
Date: 2025-03
Affected: LLM agents with persistent memory (mem0, MemGPT-style)
Attack vector: backdoor
Category: research
Severity: High

Practical attack injecting persistent malicious entries into LLM-agent long-term memory so that future benign queries trigger compromised behavior. Demonstrated end-to-end on memory-backed agents.


Mitigations:

Architectural layers (MAESTRO):