Skip to content
AI Security

confused deputy

AI security interview questions tagged confused deputy, across every topic.

3 questions · 0 unlocked for you
Open full answer →
Open full answer →
Open full answer →

Concepts behind "confused deputy"

Explanations of the mechanisms these questions rely on.

Foundational
Identity & Access
The Confused DeputyA confused deputy is a program that holds authority and is tricked into using it on behalf of a less privileged party. The problem was named in 1988 and reappears in OAuth proxies, cloud services that act for customers, and, most sharply, in AI agents: a model holding a user's or a service's credentials can be steered by text from anyone. The fix is to make each action carry the authority of the party that requested it, not the deputy's own.
Explore the full curriculum →