Evidence · DiggingBeagle record
Combining Long-Term Memory and LLMs Comes at a High Cost
Controlled memory-injection study across three services.
- Source role
- primary disclosure
Evidence record
Controlled memory-injection study across three services.
Claim-level citations (3)
- supportsPersistent and shared memory extend injection across conversations and users: ChatGPT Instant 5.3 and Gemini 3 Flash admitted persistent misuse, availability and integrity attacks but no privacy attack. Claude Sonnet 4.6 reached all four categories collectively across personal and shared memory.
Section V; Table II, page 9
- supportsPersistent and shared memory extend injection across conversations and users: In the configured Claude experiment, prompts, usernames and timestamps reached a connected spreadsheet; connector use was disclosed to users, but its logging purpose was not.
Section V, Privacy, page 7
- supportsPersistent and shared memory extend injection across conversations and users: Claude organization-wide skills and instructions required owner-level privileges; the Drive logging example also required an owner to establish the connector.
Section V shared-memory experiments, pages 6-7