Unverified50% confidenceFactExact time
The cross-tool data leakage problem is described as a variant of the Confused Deputy problem, where a tool obtains sensitive data with legitimate permissions but passes it to a tool with lower permissions, creating a de facto privilege escalation.
1
Sources
50%
Confidence
Long-term
Relevance
9/16/2026
First Seen
Sources
Related Entities
Related Claims
Unverified拥有文件系统写权限、网络访问权限和命令执行权限的Agent遭受提示词注入可能引发数据泄露、系统破坏或横向渗透70% similarUnverified在具备工具调用能力的 Agentic 系统中，一次成功的提示注入可能导致数据泄露、恶意代码执行甚至供应链攻击69% similarUnverifiedPermissions that appear harmless when held individually by an agent (such as reading files and calling an HTTP library) can enable data exfiltration when combined, which is the tool-combination emergence problem.66% similarUnverifiedAfter agents gain tool-calling and external system access capabilities, the attack surface expands significantly, facing risks such as prompt injection, unauthorized operations, and data leakage66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/926628API
curl https://kongchang.com/api/v1/knowledge/claims/926628MCP
get_claim(id=926628)