# AIVSS06 - Agent Memory and Context Manipulation

> Poisoning, corrupting, or exploiting an agent's stored memory/context across sessions.

- **Category**: Owasp AIvss
- **Subcategory**: core_security_risks
- **Canonical URL**: https://designpattern.fyi/patterns/aivss06_memory_context_manipulation/

---

## Description
'**Intent**: Protect agent memory and context stores from adversarial manipulation that could influence future behavior.

**Context**: Agents with persistent memory or access to shared knowledge bases can be poisoned by injecting malicious data that influences future reasoning and decision-making. This creates long-term manipulation vectors across sessions.

**Solution**: Validate all data before memory storage. Implement memory integrity checks. Use access controls on shared memories. Monitor for anomalous memory modifications. Apply data provenance tracking. Implement memory hygiene policies. Use immutable memory where possible.'



## Use Cases
Use when agents have persistent memory, shared knowledge bases, or retrieval-augmented generation capabilities.





## Trade-offs


### Advantages

- Maintains reasoning integrity

- Prevents long-term manipulation

- Enables memory auditing

- Supports reliable agent behavior




### Considerations & Drawbacks

- Memory validation adds overhead

- Subtle poisoning is hard to detect

- Memory pruning may lose useful data







---
**Reference**: [Original Source](https://aivss.owasp.org/)