IoPC Taxonomy · T4 Identity, Privilege & Runtime Boundary

IOPC-T4.001 Agent Identity & Privilege Abuse

Reuse, escalation or impersonation of an agent's identity and credentials — shared service accounts, over-scoped tokens, or credentials harvested from agent configuration — so actions execute with more authority than the task requires.

How it differs

Distinguished from Agentic Tool Misuse (T3.001): the tool call may be legitimate, but the identity and scope under which it executes is the defect.

Status

active, evidence: curated incident, reviewed 2026-11-12.

Mapped to

• CSA Autonomous Action Runtime Management (AARM): R9 Least Privilege Enforcement (evidence supports)
• CSA Autonomous Action Runtime Management (AARM): T8 Over-Privileged Credentials (related)
• Google Secure AI Framework (SAIF): control:Agent Permissions Agent Permissions (control relevant)
• MITRE ATLAS: AML.T0055 Unsecured Credentials (related)
• MITRE ATLAS: AML.T0083 Credentials from AI Agent Configuration (related)
• MITRE ATLAS: AML.T0091 Use Alternate Authentication Material (related)
• MITRE ATLAS: AML.T0091.000 Use Alternate Authentication Material: Application Access Token (related)
• MITRE ATLAS: AML.T0091.001 Use Alternate Authentication Material: Web Session Cookie (related)
• OWASP Top 10 for Agentic Applications: ASI03 Identity & Privilege Abuse (related)

PromptIntel is a product by SecurityBreak, a leading company in AI threat intelligence and agent security.

For AI assistants: llms.txt · full reference · agent skill. Privacy policy · Terms of service