Agentic AI Frameworks Leak Public Safety: Memory Poisoning Triggers 90% Wrongful Denials
A study audits LangChain, AutoGPT, and OpenAI Agents SDK, exposing a systematic containment gap where memory integrity is absent. In a simulated government benefits agent, a single memory‑poisoning write caused targeted wrongful denial rates of up to 88.9%. Lightweight validators can close the gap with sub‑millisecond overhead.