arXiv: Your Agent's Memories Are Not Its Own: Forged Reasoning Attacks on LLM Agent Memory and Defenses

This paper, published on arXiv in July 2026, presents a novel security vulnerability specific to large language model (LLM) agents that use persistent memory. The authors demonstrate a "forged reasoning attack" where an external actor can inject malicious data into an agent's stored memory, causing the agent to later produce false or harmful outputs based on that corrupted history. The attack exploits the fact that agents often trust their own stored memories without verifying their origin, effectively allowing an attacker to rewrite the agent's past reasoning to manipulate future decisions.

This finding directly impacts any organization deploying LLM agents with memory capabilities, particularly in regulated sectors such as finance, healthcare, legal services, and critical infrastructure. Companies using customer-facing chatbots, automated compliance monitoring tools, or internal decision-support agents that retain conversation history or task logs are at risk. The vulnerability could lead to regulatory breaches if an agent is tricked into providing incorrect advice, violating data integrity requirements under frameworks like GDPR or the EU AI Act.

Compliance teams should immediately review their AI agent architectures to identify any systems that store and retrieve agent memory without cryptographic verification or access controls. Next, they should assess whether current logging and audit trails can detect memory tampering. Finally, teams should update their AI risk registers to include this attack vector and begin testing their agents against the paper’s proposed defenses, such as memory signing and provenance tracking, before the next regulatory audit cycle.