Share-Borne AI Virus: Memory-Hopping Attacks Across LLM Agents

Source facts

The preprint describes artifact-mediated propagation, in which adversarial content inserted into a shared artifact is stored in one assistant's persistent memory, reproduced in a later artifact, and acquired by another assistant. The authors evaluate propagation in simulated temporal human-agent universes. The abstract reports multi-hop persistence and, in larger simulated environments, substantial spread reaching 60–80% of agents with chains extending to eight hops for the tested GPT-5.6 Luna setting.

Analysis

The concept treats shared artifacts and persistent memory as an indirect communication channel between otherwise isolated assistants. Mitigation would need provenance, sanitization, memory-write controls, and cross-agent artifact scanning rather than only per-session prompt filtering.

Uncertainty/Doubt

• This is an arXiv preprint based on simulated environments. The propagation rates are not evidence of real-world prevalence or exploitability without deployment-specific validation.