University of Washington study reveals prompt injection risks lurking in AI agent memory

University of Washington research demonstrates that AI agents from Anthropic and OpenAI retain rejected malicious instructions in persistent memory across sessions, creating lasting vulnerabilities through "memory poisoning" that blend attack payloads into legitimate stored context. The same study found AI-enabled browsers can be exploited via indirect prompt injection to bypass same-origin policy and exfiltrate user data.

This Wire brief sits within Fusion42's coverage of AI Agents, AI Infrastructure and Cybersecurity.