Confused Deputy
A classic security problem in which a program holding higher privileges is induced by a lower-privilege caller to perform operations the caller is not entitled to perform; in LLM agent scenarios it manifests as an agent running with superuser identity being indirectly exploited by a lower-privilege data writer.
Timeline (last 90 days)
Confused deputy is a classic problem in the security field: a program with higher privileges is induced by a lower-privilege caller to perform operations that the caller has no right to perform.
The Confused Deputy problem manifests in agent scenarios as the model using its own broad permissions to perform operations on behalf of a lower-privileged user; the permissions of the requesting user must be re-validated on each tool call.
Tool calls introduce the Confused Deputy problem: the agent holds legitimate credentials and, once induced, will use its own credentials to perform unauthorized operations on behalf of the attacker.
All Facts (3)
Confused deputy is a classic problem in the security field: a program with higher privileges is induced by a lower-privilege caller to perform operations that the caller has no right to perform.
50%UnverifiedThe Confused Deputy problem manifests in agent scenarios as the model using its own broad permissions to perform operations on behalf of a lower-privileged user; the permissions of the requesting user must be re-validated on each tool call.
50%UnverifiedTool calls introduce the Confused Deputy problem: the agent holds legitimate credentials and, once induced, will use its own credentials to perform unauthorized operations on behalf of the attacker.
50%