Unverified50% confidenceFactExact time
If the delegation chain is poorly designed, an attacker who controls one link in the chain can laterally expand access boundaries under the cover of a legitimate token—this is a new variant of the confused deputy attack in Agent scenarios.
1
Sources
50%
Confidence
Long-term
Relevance
9/21/2026
First Seen
Sources
Related Entities
Related Claims
Unverified攻击者通过提示词注入控制Agent的决策逻辑后，可利用Agent已获授权的所有工具和接口实现全链路攻击，形成混淆代理人（Confused Deputy）问题73% similarUnverifiedThird-party tools connected by agents may themselves contain vulnerabilities, becoming a foothold for attackers to infiltrate enterprise systems and constituting a supply chain risk.73% similarUnverifiedAgents possess the ability to actively execute code and access external services, requiring protection against Prompt Injection attacks and privilege escalation.70% similarUnverifiedAssigning a unique identifier to each Agent resolves the risk that multiple Agents sharing the same set of credentials makes it impossible to identify the responsible party.70% similarUnverifiedAgent Handoffs允许在对话过程中将控制权从一个Agent移交给另一个专精Agent68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/939041API
curl https://kongchang.com/api/v1/knowledge/claims/939041MCP
get_claim(id=939041)