上下文視窗記憶體投毒

Risk Description

In long conversations or multi-turn interactions, attackers plant malicious instruction fragments in early dialogue that gradually accumulate in the context window, activating only when trigger conditions are met. As humans cannot track all prior conversation content in long contexts, this attack is highly covert. Especially in AI Agent persistent memory scenarios, poisoning effects may persist across multiple work sessions.