How to resolve
Apply least-privilege principle: grant only tools the agent’s stated purpose requires. Classify tools by risk level and restrict high-impact tools (send, delete, execute) to trusted contexts.Risk
Governance/Compliance This vulnerability falls under ASI02:2026 — Tool Misuse and Exploitation in the OWASP Top 10 for Agentic Applications. Agent uses legitimate tools in unsafe ways due to over-privilege, bad input, or poisoned descriptors. Security Agent granted tools far beyond what its stated goal requires — violates least-agency principle. If exploited, this can compromise the agent’s integrity, confidentiality, or availability, potentially affecting downstream systems and data.Explanation
Agent granted tools far beyond what its stated goal requires — violates least-agency principle. This falls under ASI02 (Tool Misuse and Exploitation): Agent uses legitimate tools in unsafe ways due to over-privilege, bad input, or poisoned descriptors.Specifications
Trigger- Agent scan detects agent granted tools far beyond what its stated goal requires — violates least-agency principle
- shell tool registered on narrow-purpose agent
- broad filesystem or DB access for read-only task
- admin-level tools granted to customer-facing agent
- HIGH