Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents | Signal Canvas | ScienceToStartup

Page Freshness

Signal Canvas proof surface

Canonical route: /signal-canvas/poison-once-exploit-forever-environment-injected-memory-poisoning-attacks-on-web-agents

stale

Proof freshness: unknown
Proof status: unverified
Display score: 4/10
Last proof check: 2026-04-06
Score updated: 2026-04-06
Score fresh until: 2026-05-06
References: 0
Source count: 0
Coverage: 0%

This page is showing the last landed evidence receipt and score bundle because the latest proof data is outside the freshness window.

Agent Handoff

Canonical ID poison-once-exploit-forever-environment-injected-memory-poisoning-attacks-on-web-agents | Route /signal-canvas/poison-once-exploit-forever-environment-injected-memory-poisoning-attacks-on-web-agents

REST example

curl https://sciencetostartup.com/api/v1/agent-handoff/signal-canvas/poison-once-exploit-forever-environment-injected-memory-poisoning-attacks-on-web-agents

MCP example

{
  "tool": "search_signal_canvas",
  "arguments": {
    "mode": "paper",
    "paper_ref": "poison-once-exploit-forever-environment-injected-memory-poisoning-attacks-on-web-agents",
    "query_text": "Summarize Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents"
  }
}

source_context

{
  "surface": "signal_canvas",
  "mode": "paper",
  "query": "Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents",
  "normalized_query": "2604.02623",
  "route": "/signal-canvas/poison-once-exploit-forever-environment-injected-memory-poisoning-attacks-on-web-agents",
  "paper_ref": "poison-once-exploit-forever-environment-injected-memory-poisoning-attacks-on-web-agents",
  "topic_slug": null,
  "benchmark_ref": null,
  "dataset_ref": null
}

Evidence Receipt

Route status: building

Claims: 0

References: Pending verification

Proof: Verification pending

Freshness state: computing

Source paper: Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

PDF: https://arxiv.org/pdf/2604.02623v1

Source count: Pending verification

Coverage: 0%

Last proof check: 2026-04-06T20:17:43.292Z

Signal Canvas receipt window

Not build-ready: Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

/buildability/poison-once-exploit-forever-environment-injected-memory-poisoning-attacks-on-web-agents

Ignoreblocked

Subject: Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

Verdict

Ignore

Verdict is Ignore because current viability and proof state do not clear the buildability gate.

Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

Use Signal Canvas as the narrative proof surface

Use this Signal Canvas via API or MCP

Signal Canvas proof surface