Confused deputy problem

Malicious app tricks user into granting access

2 episodes mention this Visit official site →

Episodes

#5463: What Happens When You Click "Connect" on an AI Plugin

You click accept, the tool runs, and a credential you never saw is doing the work. Here's who actually owns it.

Sep 22
#4755: Why OAuth Makes You Re-Authorize Apps

Understanding delegated authority: why OAuth's consent flow is a feature, not a bug.

Aug 17