Stateful Agent Backdoors: Constructing Cross-Session Attack Programs
Existing backdoor attacks are limited to single sessions. This research proposes a stateful agent backdoor that allows an attack to run across multiple sessions using persistent components to save and restore its progress. This circumvents session-level security isolation by maintaining the attack's memory between different interactions, enabling autonomous, incremental execution of complex malicious tasks.