CRITICALCWE-384
PERSIST-009 Session Fixation via Memory Replay
Persistent Agent Security: Attacks that persist across agent sessions via memory poisoning, state tampering, or cached context injection
Description
Replays a crafted session history to fixate the agent into a compromised state, bypassing normal initialization
Remediation
Validate session integrity with cryptographic signatures. Reject session histories containing system role messages from untrusted sources. Re-apply safety initialization regardless of restored session state.