CRITICALCWE-345
PERSIST-008 Knowledge Base Poisoning
Persistent Agent Security: Attacks that persist across agent sessions via memory poisoning, state tampering, or cached context injection
Description
Injects false information into the agent knowledge base or RAG store that persists and influences future responses
Remediation
Validate and sign all knowledge base entries. Require source verification for policy documents. Implement content scanning for credential-related instructions before storage.