OASB
Attacks/Persistent Agent Security/PERSIST-002
HIGHCWE-200

PERSIST-002 Session State Enumeration

Persistent Agent Security: Attacks that persist across agent sessions via memory poisoning, state tampering, or cached context injection

Description

Enumerates persistent session state to discover stored credentials, preferences, and security settings that carry across sessions

Remediation

Block wildcard and pattern-based memory retrieval. Implement access control on stored session data. Never store credentials in agent memory.

Severity

HIGH

OASB Control

4.3

CWE

CWE-200
PreviousPERSIST-001 Memory Poisoning via Conversation HistoryNextPERSIST-003 Cached Context Injection