OASB
Attacks/Memory Weaponization/MEM-009
CRITICALCWE-287

MEM-009 Memory-Based Identity Impersonation

Memory Weaponization: Attempts to poison, persist, or extract data through agent memory systems

Description

Injects false identity information into memory for impersonation

Remediation

Do not store identity claims in user-writable memory.

Severity

CRITICAL

OASB Control

8.1

CWE

CWE-287