A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle

Organizes security risks and defenses for persistent agent memory into six lifecycle phases and proposes five verifiable governance primitives.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Surveys

Environment

unspecified

Topics

memory, safety-security, survey

Record publication date

2026-04-17

Evidence retrieved

2026-10-18T10:54:12Z

Resource ID

arxiv:2604.16548

Recorded paper version

arXiv v3

Version updated: 2026-09-22T07:33:24Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Zehao Lin, Xixuan Hao, Renyu Fu, Shaobo Cui, Kai Chen, Chunyu Li, Zhiyu Li, Feiyu Xiong

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

Adjacent memory-security survey. Full-text Sections 3.1 and 3.3 discuss poisoned web observations persisted into later agent actions; the work is broader than GUI agents and does not establish a platform implementation.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-18T10:54:12Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   5f5bae19420f79231516d4bcf604ea18d4f930fc7790cde5a3e7fcb8d41a1126
2. editorial primary review

   Retrieved 2026-10-18T10:54:12Z. Supports: name, kind, summary, environments, topics, scope, relations.

   Content fingerprint

   5f5bae19420f79231516d4bcf604ea18d4f930fc7790cde5a3e7fcb8d41a1126
3. editorial primary review

   Retrieved 2026-10-18T13:00:08.054642+00:00. Supports: summary, scope, notes.

   Content fingerprint

   f795535d55a4def0f2ce7dfc41a9d1d22ad38eddf48fb4f1feed98b6b5b66721

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.