What If Prompt Injection Never Left? Exploring Cross-Session Stored Prompt Injection in Agentic Systems Yuanbo Xie , Tianyun Liu , Yingjie Zhang , Suchen Liu , Yulin Li , Liya Su , Tingwen Liu ...