Glossary: Application and Credential Attacks, and AI Risks

session hijacking

Also written: hijacked session

Stealing or guessing a session token and using it to take over a session that is already signed in, which skips the password and MFA. A hijacked AI session also exposes chat history and the agent's tools.