5 min read
Research COLM 2026 paper InjecMEM shows a single interaction, with no access to the memory store, can plant an optimized record that is later retrieved and steers a research agent's answers. Retrieve-time filters barely helped.
memory-poisoning