CAPTURE: Disentangling Preference Drift from Memory Poisoning in Personalized LLM Agents

S M Asif Hossain, Ruksat Khan Shayoni, Md Kishor Morol

Personalized language agents use persistent memory to adapt to users over time, but the same mechanism creates an attack surface. When new information conflicts with stored prefere…