Excessive agency
An agentic system granted more autonomy, permissions, or file-system reach than its task actually requires, so a bug or compromise can take damaging actions such as reading and uploading a user's entire home directory.
grounded in: Trend theme: AI coding CLI tools silently uploading users' entire home directories to vendor servers (agent data-egress as the week's dominant fear); the established OWASP LLM Top 10 'Excessive Agency
Connected concepts
Agent security, Ambient authority, Lethal Trifecta, Blast-radius containment, Capability-Based Security
Explore it live in the knowledge graph →