Persistent memory enables LLM agents to reuse prior experience, but creates a new security boundary: what an agent may remember is not what it should act on. We expose an unauthorized control path where edited low-trust evidence is consolidated into persistent memory, retrieved on a clean task, and used to drive a prot...
Kai-Sheng Fan, Yi-Shu Gao, Xun-Zhu Tang et al.· 0 citations
Retrieval-augmented generation (RAG) aggregates evidence from multiple external documents, yet this joint integration creates an underexamined vulnerability: attack effects absent in individual documents can emerge through set-level composition. Existing coordinated attacks do not explicitly enforce that every proper s...
Kai-Sheng Fan, Yi-Shu Gao, Xun-Zhu Tang et al.· 0 citations
BoostAPR is presented, a three-stage framework addressing challenges of supervised fine-tuning on execution-verified demonstrations with reasoning traces, training dual reward models from execution outcomes, and PPO optimization where the line-level model redistributes rewards to critical edit regions.