Excessive Agency

Also written: LLM03

An OWASP risk in which the agent can do more than its job needs, such as emailing anyone, anywhere. Least privilege and allow-lists are the fix.