Preprint Open access
MemLeak: Cross-User Semantic Leakage in Multi-Tenant AI Agent Memory
Personal AI agents in enterprise multi-tenant deployments share a common vector store for long-term memory. Shared embedding spaces create a surface for cross-user memory leakage: a user's query can retrieve semantically adjacent memories belonging to another user through ordinary cosine-similarity retrieval, without a …