Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-27 · source-backed
arXiv 2607.23444 defeats per-user memory isolation without violating it. Agents routinely embed LTM-retrieved data in tool-call parameters, so a malicious tool exfiltrates memory while every user-ID binding stays intact. SPORE decouples the adversarial command from retrieval anchors by persisting the command in short-term memory, then runs geometric coverage optimization over the embedding space to steer anchors toward unexplored regions. 80.0% extraction with unlimited triggers, 47.0% with only 20. It also persists reactivation payloads that resume across sessions with no further user action. Anyone wiring mem0-style memory behind third-party tools should read this today.
Each link below shares sources, entities, or timing with this story.
Shared entity: Anyone / Same source domain / Shared topic / Earlier coverage / Tension
Both cover Anyone; reported by the same outlet (arxiv.org); overlapping topics (agent, anyone).
Shared entity: Anyone / Same source domain / Shared topic / Earlier coverage
Both cover Anyone; reported by the same outlet (arxiv.org); overlapping topics (agent, anyone, memory).
Both cover Anyone; reported by the same outlet (arxiv.org); overlapping topics (agent, anyone).
Both cover Anyone; reported by the same outlet (arxiv.org); overlapping topics (agent, anyone).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (agent, data, tool); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (action, agent, memory); pushes against this story (but).
Reported by the same outlet (arxiv.org); overlapping topics (agent, data, memory); pushes against this story (versus).
Reported by the same outlet (arxiv.org); overlapping topics (action, agent, anyone); pushes against this story (against).