Who Is the Agent Acting As? Why AI Agents Become Confused Deputies
One injected line in a support ticket shows why an AI agent with a broad service account is a confused deputy, and where the authorization check has to live.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.