Accept Changes, Reject Attacks: Robust Memory Management for LLM Agents

Summary

This research paper formalizes robustness for LLM agent memory managers, which must handle both outdated facts and memory poisoning without degrading on other inputs. The authors introduce evidence-conditioned accuracy (ECA), which also checks that selected records contain all needed evidence and are updated and attack-free. They report that existing memory systems and defenses are no more robust than an untuned manager, and that a one-shot fine-tuning recipe improves every category score and more than doubles the untuned manager's overall ECA across three backbones, though robustness remains incomplete.

Related items

• MediumTop AI coding agent security resources — November 2026Similar attack · Adversa AI Blog
• MediumHow We Took Over ChatGPT AccountsSimilar attack · Simon Willison's Weblog
• HighCVE-2026-62331: praktor path traversal via Telegram document upload filenamesSimilar attack · NVD/CVE Database
• HighCVE-2026-61789: DBHub read-only SQL validation bypass on MySQL and MariaDB connectorsSimilar attack · NVD/CVE Database
• InfoSecPO: Principled Adversarial Training for Prompt Injection SecuritySimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)