When Malicious Instructions Persist: Persistent Memory Poisoning Attack on Harness-Based Agents

Harness design has transformed the development of LLM-based agents by integrating memory, tool use, and runtime control. However, this design also introduces security and privacy risks because malicious instructions from external sources may be written into persistent memory and persist across...