CRITICALCWE-269
PERSIST-006 State Accumulation Attack
Persistent Agent Security: Attacks that persist across agent sessions via memory poisoning, state tampering, or cached context injection
Description
Gradually escalates privileges across multiple sessions by incrementally modifying stored state, each change small enough to avoid detection
Remediation
Implement permission state as immutable configuration, not mutable runtime state. Log all state changes. Detect incremental privilege escalation patterns across sessions.