Memory Control Flow Attack (Cross-task Propagation) on MEMFLOW M-Scope
100Instruction Success Rate (ISR)MEMFLOW
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Online, Framework=LangChain, LLM Backbone=gpt-5-mini2026.03 | 100 | 97.2 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Online, Framework=LangChain, LLM Backbone=claude-sonnet-4-52026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Online, Framework=LangChain, LLM Backbone=gemini-2.5-flash2026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Online, Framework=LlamaIndex, LLM Backbone=gpt-5-mini2026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Online, Framework=LlamaIndex, LLM Backbone=claude-sonnet-4-52026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Online, Framework=LlamaIndex, LLM Backbone=gemini-2.5-flash2026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Isolated, Framework=LangChain, LLM Backbone=gpt-5-mini2026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Isolated, Framework=LangChain, LLM Backbone=claude-sonnet-4-52026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Isolated, Framework=LangChain, LLM Backbone=gemini-2.5-flash2026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Isolated, Framework=LlamaIndex, LLM Backbone=gpt-5-mini2026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Isolated, Framework=LlamaIndex, LLM Backbone=claude-sonnet-4-52026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Strong, Regime=Isolated, Framework=LlamaIndex, LLM Backbone=gemini-2.5-flash2026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Weak, Regime=Isolated, Framework=LangChain, LLM Backbone=gpt-5-mini2026.03 | 100 | 97.2 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Weak, Regime=Isolated, Framework=LangChain, LLM Backbone=claude-sonnet-4-52026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Weak, Regime=Isolated, Framework=LangChain, LLM Backbone=gemini-2.5-flash2026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Weak, Regime=Isolated, Framework=LlamaIndex, LLM Backbone=gpt-5-mini2026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Weak, Regime=Isolated, Framework=LlamaIndex, LLM Backbone=claude-sonnet-4-52026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=Weak, Regime=Isolated, Framework=LlamaIndex, LLM Backbone=gemini-2.5-flash2026.03 | 100 | 100 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=OFF, Regime=Isolated, Framework=LangChain, LLM Backbone=gpt-5-mini2026.03 | 100 | 0 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=OFF, Regime=Isolated, Framework=LangChain, LLM Backbone=claude-sonnet-4-52026.03 | 100 | 0 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=OFF, Regime=Isolated, Framework=LangChain, LLM Backbone=gemini-2.5-flash2026.03 | 100 | 0 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=OFF, Regime=Isolated, Framework=LlamaIndex, LLM Backbone=gpt-5-mini2026.03 | 100 | 0 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=OFF, Regime=Isolated, Framework=LlamaIndex, LLM Backbone=claude-sonnet-4-52026.03 | 100 | 0 | |
| MEMFLOWTool Target=Safe Tool, Tool Label=Harmful, Retrieval Strength=OFF, Regime=Isolated, Framework=LlamaIndex, LLM Backbone=gemini-2.5-flash2026.03 | 100 | 0 |