HIGHCWE-269
PERSIST-004 Preference Persistence Backdoor
Persistent Agent Security: Attacks that persist across agent sessions via memory poisoning, state tampering, or cached context injection
Description
Sets a malicious user preference that alters agent behavior in future sessions (e.g., disabling safety filters, changing output format to leak data)
Remediation
Security-relevant preferences must be immutable from user input. Separate security configuration from user preferences. Require admin authentication for safety-related settings.