# A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle

Organizes security risks and defenses for persistent agent memory into six lifecycle phases and proposes five verifiable governance primitives.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2604-16548/
- Original source: https://arxiv.org/abs/2604.16548
- Kind: survey
- Review: curated
- Scope: adjacent
- Environments: unspecified
- Topics: memory, safety-security, survey
- Evidence checked: 2026-10-18T10:54:12Z
- ID: arxiv:2604.16548

## Limitations

Adjacent memory-security survey. Full-text Sections 3.1 and 3.3 discuss poisoned web observations persisted into later agent actions; the work is broader than GUI agents and does not establish a platform implementation.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2604-16548/record.json

## Authors

Zehao Lin, Xixuan Hao, Renyu Fu, Shaobo Cui, Kai Chen, Chunyu Li, Zhiyu Li, Feiyu Xiong

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2604-16548/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2604-16548/citation.csl.json

## Recorded arXiv snapshot

- Version: 3
- Version source: https://arxiv.org/abs/2604.16548v3
- First submission: 2026-04-17T06:28:22Z
- Version updated: 2026-09-22T07:33:24Z
- Abstract SHA-256: fb75ea30086ecf069d8adda1513a6e906cfcfcedcd4cab01d0986a850aa8009a
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?id_list=2508.19461%2C2508.19493%2C2509.21782%2C2509.25140%2C2510.03485%2C2510.07809%2C2510.14276%2C2510.27140%2C2510.27210%2C2511.13248%2C2512.08417%2C2601.07263%2C2602.13516%2C2603.00476%2C2603.11862%2C2603.18762%2C2603.23791%2C2604.00986%2C2604.16515%2C2604.16548%2C2604.24348%2C2605.05509%2C2605.08876%2C2605.20833%2C2605.24785%2C2607.00333%2C2607.18659%2C2607.25255%2C2608.00202%2C2608.08939%2C2608.24913%2C2608.29596&max_results=32 (retrieved 2026-10-18T10:54:12Z; SHA-256 5f5bae19420f79231516d4bcf604ea18d4f930fc7790cde5a3e7fcb8d41a1126)
- https://export.arxiv.org/api/query?id_list=2508.19461%2C2508.19493%2C2509.21782%2C2509.25140%2C2510.03485%2C2510.07809%2C2510.14276%2C2510.27140%2C2510.27210%2C2511.13248%2C2512.08417%2C2601.07263%2C2602.13516%2C2603.00476%2C2603.11862%2C2603.18762%2C2603.23791%2C2604.00986%2C2604.16515%2C2604.16548%2C2604.24348%2C2605.05509%2C2605.08876%2C2605.20833%2C2605.24785%2C2607.00333%2C2607.18659%2C2607.25255%2C2608.00202%2C2608.08939%2C2608.24913%2C2608.29596&max_results=32 (retrieved 2026-10-18T10:54:12Z; SHA-256 5f5bae19420f79231516d4bcf604ea18d4f930fc7790cde5a3e7fcb8d41a1126)
- https://arxiv.org/html/2604.16548v3 (retrieved 2026-10-18T13:00:08.054642+00:00; SHA-256 f795535d55a4def0f2ce7dfc41a9d1d22ad38eddf48fb4f1feed98b6b5b66721)