Unverified50% confidenceFactExact time
The Confused Deputy problem manifests in agent scenarios as the model using its own broad permissions to perform operations on behalf of a lower-privileged user; the permissions of the requesting user must be re-validated on each tool call.
1
Sources
50%
Confidence
Long-term
Relevance
10/11/2026
First Seen
Sources
Related Entities
Related Claims
Unverified攻击者通过提示词注入控制Agent的决策逻辑后，可利用Agent已获授权的所有工具和接口实现全链路攻击，形成混淆代理人（Confused Deputy）问题73% similarUnverifiedSome agent applications that rely on Full Disk Access for their functionality may need to redesign the way they request permissions.70% similarUnverifiedThe evaluated_permission enum in Managed Agents-related events now shares a single definition across multiple events.69% similarUnverifiedIt is recommended to explicitly restrict sub-agent invocation in agents.md, clearly requiring the model not to use sub-agents unless the user has actively requested it.69% similarVerifiedIn multi-agent collaborative architectures, the controller agent is responsible for task planning and scheduling, while sub-agents serve as execution units with specific tool access permissions and behavioral constraints.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/998098API
curl https://kongchang.com/api/v1/knowledge/claims/998098MCP
get_claim(id=998098)