Confused Deputy

Definition

A security risk pattern in which an agent acting with broad service credentials on behalf of a low-privilege user can leak or change data the user should not be able to touch. The fix is to scope tool permissions to the calling user's entitlements rather than the service account's broader credentials, so the agent can never do more on the user's behalf than the user could do directly.