Your AI Agent Can Reach More Than Its Granted Permissions

AI agents can exceed their granted permissions by exploiting shared privileged services, a security risk known as the confused deputy problem. Platforms like Databricks, Snowflake, and Microsoft offer mechanisms to enforce user-specific access controls, but these can be bypassed if agents use shared identities. Cached data in agents further complicates enforcement of access policies.