Unverified50% confidenceFactExact time
An agent can be renamed with just a single line of instruction, meaning anyone can inject instructions into the agent, posing a risk of manipulation.
1
Sources
50%
Confidence
Long-term
Relevance
10/2/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAssigning a unique identifier to each Agent resolves the risk that multiple Agents sharing the same set of credentials makes it impossible to identify the responsible party.76% similarUnverified攻击者通过提示词注入控制Agent的决策逻辑后，可利用Agent已获授权的所有工具和接口实现全链路攻击，形成混淆代理人（Confused Deputy）问题71% similarUnverifiedAgents may produce changes that are technically correct but business-incorrect, meaning code that is syntactically and compilationally valid but logically wrong at the business level.70% similarUnverifiedIf the delegation chain is poorly designed, an attacker who controls one link in the chain can laterally expand access boundaries under the cover of a legitimate token—this is a new variant of the confused deputy attack in Agent scenarios.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/967108API
curl https://kongchang.com/api/v1/knowledge/claims/967108MCP
get_claim(id=967108)