Attacks/Capability Abuse/CA-008
CRITICALCWE-269

CA-008 Privilege Escalation via Tool Chain

Capability AbuseAttempts to misuse agent tools and capabilities

Description

Attempts to escalate privileges by chaining tools

Remediation

Implement least privilege per-action. Do not allow privilege escalation via tool chaining.

Severity

CRITICAL

OASB Control

2.2

CWE

CWE-269

Run this test

$ npx hackmyagent attack --payload CA-008