{
 "generated": "2026-11-01",
 "node": {
  "id": "layer:agent-security--4",
  "type": "Layer",
  "name": "记忆 / RAG污染",
  "slug": "agent-security--4",
  "map": "agent-security",
  "map_title": "Agent 安全攻击面",
  "num": 4,
  "step": "Layer 04",
  "role": "让 Agent 的长期记忆或检索知识库\"记住\"攻击者想要的东西，污染会跨会话持续影响后续行为。这一类 已有一起厂商确认修复的真实漏洞 （SpAIware），其余多为高质量学术概念验证。",
  "n_cards": 4,
  "page": "/landscape/agent-security/#layer-4",
  "degree": 0
 },
 "page": "https://xiaopingfeng.com/graph/e/layer/agent-security--4/",
 "out": [
  {
   "type": "flows_to",
   "sentence": "总览图里的箭头：记忆 / RAG污染 → 沙盒逃逸 / 越权操作",
   "direction": "out",
   "id": "layer:agent-security--6",
   "name": "沙盒逃逸 / 越权操作",
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」总览图：第 4 层指向第 6 层",
     "url": "https://xiaopingfeng.com/landscape/agent-security/"
    }
   ]
  }
 ],
 "in": [
  {
   "type": "placed_in",
   "sentence": "OpenAI出现在 Landscape 的「记忆 / RAG污染」",
   "direction": "in",
   "id": "org:openai",
   "name": "OpenAI",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 04 层「记忆 / RAG污染」：卡片「SpAIware（ChatGPT记忆投毒）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-spaiware"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "SpAIware出现在 Landscape 的「记忆 / RAG污染」",
   "direction": "in",
   "id": "event:chatgpt-spaiware-memory-poisoning",
   "name": "SpAIware（ChatGPT记忆投毒）",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 04 层「记忆 / RAG污染」：卡片「SpAIware（ChatGPT记忆投毒）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-spaiware"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "PoisonedRAG出现在 Landscape 的「记忆 / RAG污染」",
   "direction": "in",
   "id": "inst:poisonedrag",
   "name": "PoisonedRAG",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 04 层「记忆 / RAG污染」：卡片「PoisonedRAG」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-poisonedrag"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "MINJA出现在 Landscape 的「记忆 / RAG污染」",
   "direction": "in",
   "id": "inst:minja",
   "name": "MINJA",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 04 层「记忆 / RAG污染」：卡片「MINJA」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-minja"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Anthropic出现在 Landscape 的「记忆 / RAG污染」",
   "direction": "in",
   "id": "org:anthropic",
   "name": "Anthropic",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 04 层「记忆 / RAG污染」：卡片「Many-shot Jailbreaking」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-many-shot"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Many-shot Jailbreaking出现在 Landscape 的「记忆 / RAG污染」",
   "direction": "in",
   "id": "inst:many-shot-jailbreaking",
   "name": "Many-shot Jailbreaking",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 04 层「记忆 / RAG污染」：卡片「Many-shot Jailbreaking」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-many-shot"
    }
   ]
  }
 ]
}