Attack vector
Memory poisoning
Malicious content stored in an AI agent's long-term memory or RAG database. When the agent retrieves it in future sessions, the embedded instructions reactivate — causing malicious behavior long after the original attack. Current detection rates are below 20%.