You gave your agent memory. Someone else is using it

Memory poisoning is now OWASP's top agentic risk. One injected fact can corrupt every session that follows, and your agent will defend it as true.