Paper: Agent Memory Laundering Grants False Authority in 50.2% of Unauthorized Requests
ChrisUniverse · x · 2026-09-05
A new paper introduces "endogenous authorization laundering": long-running LLM agents can turn unapproved actions into apparently valid permissions through their own memory updates, with no external attacker needed.
Key findings from EAL-Bench:
- Evaluated 5 LLMs as memory writers and 2 as executors across procurement, cybersecurity, and finance domains
- Under incremental memory updates, writers created false authority for up to 50.2% of unauthorized requests
- Once false authority was stored, executors acted on it in 98.6% of trials
- Two safeguards—provenance-backed permissions and bounded event sourcing—substantially reduce laundering but reject more legitimate actions, exposing a safety-utility tradeoff
The authors argue persistent memory is not just a performance component but part of an agent's effective authorization policy.
Related event: Research Warns Agent Memory Enables Authorization Laundering(3 posts)→
More from coding & agent
- GPT Sol plays real-time table tennis via latency-aware agent research loop — wzenus · 2026-10-21
- PostgreSQL 19 slips to November as LLM-assisted code review floods committers with edge cases — sanjaykalra · 2026-10-21
- 9x Vision open-sources video perception for agents: timestamped evidence via MCP and CLI — koto9x · 2026-10-21
- LangChain adds Human-in-the-Loop beta to Managed Deep Agents — LangChain · 2026-10-21
- Voxtral 3 ships a LiveKit-based voice agent SDK streaming listen-think-speak — MistralAI · 2026-10-21
- Open-sourced pixel art normals generator ships as Rust CLI and wasm library — HugoDuprez · 2026-10-20