---
title: "Least Privilege"
description: "1 posts about Least Privilege, summarised, each linking to the original."
---

# Least Privilege
> 1 posts about Least Privilege, summarised, each linking to the original.

## Articles

### [Confused Deputy: The Old Bug That AI Agents Keep Reintroducing](https://yomu.fyi/post/confused-deputy-the-old-bug-that-ai-agents-keep-reintroducing.md)
- Company: [Auth0](https://yomu.fyi/company/auth0.md)
- Author: Andrea Chiarelli
- Published: Sep 22, 2026
- Type: Explainer

The Confused Deputy problem, first documented in 1988, describes a program with legitimate authority being tricked into misusing that authority on behalf of a less-privileged actor. AI agents are particularly vulnerable because they process instructions and untrusted content through the same natural-language channel, making prompt injection straightforward. The post traces this pattern through CSRF, SSRF, and recent attacks like Clinejection, where an issue-triage bot executed an attacker-supplied command from a crafted issue title. That attack led to a poisoned GitHub Actions cache and a compromised npm package downloaded 4,000 times. The fix involves task-scoped short-lived credentials, capability-scoped permissions, credential isolation from the model, and human-in-the-loop approval for high-risk actions.