---
type: "Glossary term"
title: "Confused deputy"
description: "A privileged component tricked into misusing its authority for another."
tags: [glossary]
generated: { by: human:crpage, at: 2026-07-09T09:44:00Z }
aliases: "confused deputy"
status: stable
---

# Definition
An authority failure in which a privileged component is tricked into using its permissions on behalf of a less-privileged caller — a core risk when agents chain tools.

# Used in this bundle
Appears in: [identity-and-authorisation](../stack/identity-and-authorisation.md).

# Related terms
[least privilege](least-privilege.md).