If you're building AI agents with Flowise, Dify, n8n, or similar no-code/low-code platforms, there's a security threat you probably haven't thought about: memory poisoning.
And it's not theoretical. It's in the OWASP Top 10 for Agentic Applications 2025 as ASI06.
What Is Memory Poisoning?
Your no-code agent processes external content — user messages, documents, web pages, emails. That content gets summarized, extracted, and written to memory. Future agent runs read from that memory to decide what to do next.
The attack is simple: embed a malicious instruction in any content your agent processes.
