Tool Misuse & Exploitation: When Your Agent's Legitimate Tools Become Weapons (ASI02)

Wed, 15 Jul 2026 07:11:00 +0300

This is post #2 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.

Your customer service agent has access to an email tool. Makes sense. It needs to send order confirmations.

But that same email tool can also send emails to anyone. With any content. Including your entire customer database as an attachment.

The agent wasn’t hacked. The tool wasn’t compromised. The agent simply used a legitimate tool in a way you never intended. And because you gave it access to the full email API instead of just “send order confirmations,” there was nothing stopping it.

Identity & Privilege Abuse: When Your Agent Acts Like It Owns the Place (ASI03)

Wed, 15 Jul 2026 07:10:00 +0300

This is post #3 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.

Your engineering manager builds an agent to help her team. She gives it access to the team’s Jira board, their code repos, and the internal wiki. Normal stuff.

Then the agent delegates a subtask to a “helper” agent. And that helper inherits all of the manager’s permissions. The full repo access. The HR data she can see. The production deployment keys cached in the session.

Iam on Technodrone

Tool Misuse & Exploitation: When Your Agent's Legitimate Tools Become Weapons (ASI02)

Identity & Privilege Abuse: When Your Agent Acts Like It Owns the Place (ASI03)