Expired50% confidenceFactExact time
Real-world testing has found that AI Agent tools with excessive permissions can read and display user account balances, WeChat red packet details, and confidential internal company information.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/6/2026
First Seen
Valid until: 10/4/2026(expired)
Sources
Related Claims
UnverifiedAI-Q的身份透传模式能实时识别用户权限，AI无法访问用户无权查看的机密文档76% similarUnverifiedThe Qingtian Jian module of this multi-agent system is connected to trending data from Xiaohongshu and Weibo, with AI agents automatically searching and filtering trending topics and evaluating business opportunities.74% similarUnverifiedThe system has a Duzhi module that records the API call token consumption of each AI agent for cost visualization and resource optimization.73% similarUnverifiedEnterprise self-developed AI Agents have the advantages of keeping data within the internal network, highly controllable functionality, and fine-grained permission management.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/112619API
curl https://kongchang.com/api/v1/knowledge/claims/112619MCP
get_claim(id=112619)