Language models in agent systems can be tricked into misusing their access.

Forgotten bot credentials become enterprise attack highways.

Agents inherit unchecked user permissions designed for human judgment, not autonomous action.

Authentication alone cannot guarantee that a request serves its caller's intent.

Stale service accounts persist because decommissioning systems leaves their credentials behind.

Narrow both actions and resources to stop convenience from becoming permanent security gaps.