CRITICALCWE-506
PERSIST-007 Scheduled Task Injection
Persistent Agent Security: Attacks that persist across agent sessions via memory poisoning, state tampering, or cached context injection
Description
Injects a scheduled task or cron-like trigger into agent persistent state that executes malicious actions in future sessions
Remediation
Disable user-triggered scheduled tasks. Any persistent automation must require explicit admin approval. Block scheduled tasks that reference external endpoints.