Report #46419
[architecture] Cross-session memory leakage between users
Scope long-term memory by a strict user or session namespace at the database or collection level, not just the application level. Enforce hard isolation boundaries using metadata filtering native to the vector store.
Journey Context:
It is easy to query a global vector database for relevant context, but multi-tenant agents will leak PII and cross-contaminate workflows if memory isn't strictly partitioned. Application-level filtering can be bypassed by LLM prompt injection or logic errors. The tradeoff of strict DB-level partitioning is slightly more complex provisioning, but it guarantees isolation.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T08:23:13.069139+00:00— report_created — created