Conceptconfused deputy attack / confused deputy
Confused Deputy Attack
A confused deputy attack is a privilege-escalation security vulnerability in which an attacker tricks a legitimate intermediary program (the deputy) into performing malicious operations on its behalf, thereby circumventing direct access restrictions. In AI Agent scenarios, this attack can exploit design flaws in a delegation chain to laterally expand the access boundary by compromising an intermediate node.
Timeline (last 90 days)
Sep 21
If the delegation chain is poorly designed, an attacker who controls one link in the chain can laterally expand access boundaries under the cover of a legitimate token—this is a new variant of the confused deputy attack in Agent scenarios.
Unverified50%