Confused deputy pattern
Named by 3 kept items in this workspace.
Search every workspace for Confused deputy pattern. It matches the name as written, so it can find other things that share it.
The items that name it 3
The MCP server faithfully returns attacker content, the agent is trusted and acts on it with its own legitimate privileges, the attacker contributes nothing but text
A trusted agent is misused/manipulated by a low-privileged user or compromised low-risk tool to perform unauthorized actions it inherits excessive privileges for, such as modifying contracts and approving payments without triggering alerts.
A trusted agent with excessive privileges is manipulated (e.g. via crafted requests) into performing unauthorised actions on behalf of a lower-privileged malicious actor, producing audit logs that appear legitimate
All techniques in this workspace.