Unverified50% confidenceFactExact time
An agent typically inherits the permissions of the user running it (including sudo or cloud IAM permissions), which is a critical vulnerability.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe Agent runs with the permissions of its process, not with the permissions of the user who initiated the prompt.76% similarUnverifiedAgents possess the ability to actively execute code and access external services, requiring protection against Prompt Injection attacks and privilege escalation.76% similarUnverifiedCloud-based Agents make it easier to schedule computing resources and apply unified updates, but have shortcomings in data privacy, offline availability, and system-level integration — gaps that desktop Agents can fill.75% similarUnverifiedThe login and identity problems an Agent faces when operating on behalf of a user are a common breakpoint, and it is necessary to distinguish the login state shared by humans and machines from the Agent-specific authorization channel.73% similarUnverifiedAgent 类产品在企业部署中面临权限归属难题——Agent 应继承发起请求用户的权限还是拥有独立服务账号权限，目前行业尚未形成标准解决方案72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1044530API
curl https://kongchang.com/api/v1/knowledge/claims/1044530MCP
get_claim(id=1044530)