Unverified50% confidenceSolutionExact time
Giving the session that produces the execution summary only read-only access to the target document, no network egress, no email sending, and no file listing permission ensures that an attacker cannot borrow permissions that do not exist.
1
Sources
50%
Confidence
Long-term
Relevance
10/18/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAn attacker only needs read/write access to the agent socket file on the remote host to send arbitrary signing requests to the local agent, which is especially easy for malicious users with root privileges or on shared hosts68% similarUnverified中转平台在技术层面对所有对话内容拥有完整的读取权限，用户无法通过地址栏的锁标识判断数据是否真正私密68% similarUnverifiedGuiding clients to create dedicated service accounts for automation projects and grant minimal permissions can limit the attack surface in the event of a credential leak.67% similarUnverified只读/读写模式切换机制本质上实现了信息安全领域的最小权限原则（Principle of Least Privilege）67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1063956API
curl https://kongchang.com/api/v1/knowledge/claims/1063956MCP
get_claim(id=1063956)