Attacks/Capability Abuse/CA-003
CRITICALCWE-22

CA-003 Unauthorized File Access

Capability AbuseAttempts to misuse agent tools and capabilities

Description

Attempts to access files outside allowed scope

Remediation

Implement strict path allowlisting. Block path traversal.

Severity

CRITICAL

OASB Control

2.2

CWE

CWE-22

Run this test

$ npx hackmyagent attack --payload CA-003