Confused Deputy

A confused deputy is a program with legitimate authority that is tricked into using it for someone who has none. AI agents and shared tool services recreate the problem whenever a request is checked against the service’s authority instead of the caller’s.