Memory poisoning is an attack that corrupts the persistent memory an AI agent accumulates during operation, causing the agent to retrieve and act on malicious content in future sessions. Unlike a prompt injection that vanishes when a chat window closes, poisoned memory persists across sessions and can steer decisions for another user weeks later. That …