Unverified50% confidenceFactExact time
The Confused Deputy Problem refers to a high-privilege agent being exploited by a low-privilege caller to perform operations that exceed its own authorization.
1
Sources
50%
Confidence
Long-term
Relevance
9/24/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedTool calls introduce the Confused Deputy problem: the agent holds legitimate credentials and, once induced, will use its own credentials to perform unauthorized operations on behalf of the attacker.74% similarUnverifiedAgent的安全性问题比对话更复杂，Skills设计需内置权限控制（最小权限原则）、执行沙箱和人机协作审批机制64% similarUnverified协作式Agent在实践中遇到的问题包括信息过载、上下文污染和协作流程设计不当导致的冲突处理机制不完善64% similarUnverifiedThe autonomous decision-making of agents may produce unpredictable side effects such as accidental code deletion and erroneous deployments, requiring well-developed permission boundaries and behavioral audit mechanisms.63% similarUnverifiedIn agent collaborative invocation, mainstream security practices favor adopting the principle of least privilege, where each call chain should be independently authenticated to prevent privileges from accumulating and amplifying without limit across multi-hop calls.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/948296API
curl https://kongchang.com/api/v1/knowledge/claims/948296MCP
get_claim(id=948296)