CRITICALCWE-345
PERSIST-010 Embedding Vector Poisoning
Persistent Agent Security: Attacks that persist across agent sessions via memory poisoning, state tampering, or cached context injection
Description
Injects adversarial embedding vectors into the agent vector store to influence retrieval and shift agent behavior persistently
Remediation
Make vector stores append-only with admin-signed writes. Validate embedding metadata: block priority overrides from user input. Implement adversarial embedding detection.