{"data":{"id":"8cce2b53-5760-46a6-b37c-4607a794b3fe","title":"Combining Long-Term Memory and LLMs Comes at a High Cost: From Prompt Injection to Persistent Compromise","summary":"Researchers show that persistent memory features in ChatGPT Instant 5.3, Claude Sonnet 4.6, and Gemini 3 Flash enable memory injection, letting malicious instructions carry across sessions. They report that all NIST attack goals are achievable under their general threat model, including persistent disinformation, harmful content, and simulated offline unresponsiveness. On Claude, shared-memory features let an attacker compromise multiple users in an organization and exfiltrate user prompts.","solution":"Derived defense mechanisms from the proposed threat model and foundational cybersecurity principles; the authors state that nearly half of these mitigations remain unimplemented across the target services.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.28810v1","publishedAt":"2026-10-20T18:33:05.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection","jailbreak"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","Anthropic","Google"],"affectedVendorsRaw":["ChatGPT Instant 5.3","Claude Sonnet 4.6","Gemini 3 Flash","Model Context Protocol (MCP)"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-20T18:33:05.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","safety"],"aiComponentTargeted":"model","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051","AML.T0054"]}}