Who is the agent acting as?
Every agent I audited this year had the same kind of problem. It authenticated as a service account with more access than any human on the team, on behalf of a user whose identity was lost the moment the request left the browser, so the logs couldn't say who a call was for. Fixing it is mostly an OAuth problem, and the pieces exist now.
🎯 Vulnerability: OAuth 2.0 / JWT Authentication Bypass
💡 Defense Fix: Strictly verify JWT signatures on the backend, enforce state parameter validation, and reject 'alg: none'.