arXiv: MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair

This publication introduces MemSecBench, a new benchmark framework designed to systematically test and measure memory poisoning vulnerabilities in AI agents. Memory poisoning occurs when an attacker injects false or harmful information into an AI system's long-term memory, which can then persist across multiple interactions and influence future decisions. The paper tracks the full lifecycle of such attacks, from initial persistence through to real-world consequences and potential repair mechanisms, providing a structured methodology for evaluating how resilient AI agents are against this emerging threat.

The primary audience for this research includes organizations deploying autonomous AI agents, particularly in high-stakes sectors such as finance, healthcare, legal services, and critical infrastructure. Any entity using AI systems that retain and recall user-specific or operational data over extended sessions should pay close attention, as memory poisoning could lead to compliance failures under data integrity, security, and accountability requirements. Regulators and internal audit teams will also need to understand these risks to assess whether existing AI governance frameworks adequately address memory-based attack vectors.

Compliance teams should immediately review their AI risk assessment protocols to include memory poisoning as a distinct threat category. They should evaluate whether their current AI systems have mechanisms to detect, isolate, and remediate corrupted memory entries, and consider incorporating benchmark tests like MemSecBench into their validation pipelines. Documentation of these assessments and any remediation steps should be updated to demonstrate proactive risk management to regulators, particularly under emerging AI safety frameworks that emphasize continuous monitoring and resilience testing.