BREAKING
MemGhost Poisons AI Agent Memory
How the Slow-Acting Attack Works
1
Email plants false fact
↓
2
Stored as trusted memory
↓
3
Stays hidden in chat
↓
4
Alters later session
0
%
OpenClaw + GPT-5.4
0
%
Claude Sonnet 4.6
0
WhisperBench cases
Memory Is the Attack Surface
Why It Is a Broad Concern
Transfers Across
Reach
●
Filesystem storage
●
Vector DBs like Mem0
●
Multiple agent frameworks
Defenses Tested
Robust
●
Input-level checks
●
Model-level guards
●
System-level controls
Disclosure, No Full Fix Yet
AI NEWS BLITZ
Researchers show a single crafted email can silently rewrite an AI assistant's long-term memory.