confused deputy

The. (1988). confused deputy.

Retired. This entry was not a citation. Our extractor stored an inline prose definition from the article as though it were a bibliographic record, so its title is the name of a concept rather than of a published work. The page is kept because links to it still resolve, but it is withdrawn from the reference list. This entry is kept so the citations that pointed at it still resolve, and so the correction is visible rather than silent.

Type

Unclassified

Intellectual base

Unclassified

Year

1988

Link

no authoritative link yet

Cited by

2 citations across 2 artifacts.

Each citation links to the sentence it supports in the citing article.

Mechanisms

• Capability-Scoped Tool Gateway
  • … is that a gateway is only as strong as its scoping: an over-broad grant — "give the agent write access to the whole database, we'll trust the prompt" — turns the gateway into a rubber stamp, and the classic confused-deputy trap is exactly a privileged component induced to misuse authority it legitimately holds.

    This sourceA tool gateway exists so that a confused interpreter, acting as a deputy, still cannot exceed the capabilities it was granted.

• Reverse Proxy Server
  • Its dangerous failure mode is the confused deputy: because the proxy holds privileged reach into the private network, an attacker who tricks it into forwarding a crafted request can make it act as their agent against the very backend it protects (request smuggling and server-side request forgery are this pattern).

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Registry ID ref:2c1ae0b6c6c6 · see in the full table