CRITICALCWE-522
PERSIST-005 Cross-Session Credential Harvesting
Persistent Agent Security: Attacks that persist across agent sessions via memory poisoning, state tampering, or cached context injection
Description
Stores a memory entry that instructs the agent to include credentials in responses during future sessions
Remediation
Scan stored memory for credential patterns before persisting. Block memory entries that reference API keys, tokens, or authentication headers. Apply output filtering for credentials regardless of stored instructions.