ConceptConfused Deputy Problem
Confused Deputy Problem
An attack pattern in computer security in which a legitimately authorized agent is deceived into using its permissions to perform actions or access targets outside the original scope of authorization. The attacker does not need to forge credentials; instead, after authorization is granted, the attacker substitutes a different execution target, exploiting the agent's authority on their behalf.