{"data":{"id":"994dea43-95f3-43e4-b5be-6d5293fc2566","title":"ClawMMU: Protection-Coherent Virtual Memory for Stateful LLM Agents","summary":"ClawMMU is a protection layer for stateful LLM agents that labels every memory item with its owner, scope, origins and authority. It checks these labels whenever content enters the model's context, is written to or read from storage, or drives a tool call. The checks depend on where content came from rather than what it says, so the harness can stop memory-based attacks even when the model is fooled.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.28093v1","publishedAt":"2026-10-20T12:09:53.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LLM agents","agent harnesses"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-20T12:09:53.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}