Skip to content
InfoResearchPreprintLLM-specific

MemoryDojo: Benchmarking Poisoning Through LLM Agent Memory

Published
Record updated
View JSON

Summary

MemoryDojo is a benchmark for tracing how poisoned information persists through LLM agent memory and affects later agent behavior. It contains 155 multi-session long-horizon trajectories across four domains and supports five memory systems. The authors find all tested memory systems are susceptible to poisoning, with substantial variation in downstream effects, and propose a memory-aware poison optimization process.