Record metadata

type: "Glossary term"
title: "Confused deputy"
description: "A privileged component tricked into misusing its authority for another."
tags: [glossary]
generated: { by: human:crpage, at: 2026-07-09T09:44:00Z }
aliases: "confused deputy"
status: stable

Definition

An authority failure in which a privileged component is tricked into using its permissions on behalf of a less-privileged caller — a core risk when agents chain tools.

Used in this bundle

Appears in: identity-and-authorisation.

least privilege.

Definition

Used in this bundle

Related terms