Skip to content
← All termsGlossary

Privilege escalation

Privilege escalation is when an AI agent gains more access than it was meant to have. The agent chains granted permissions or inherits a user's rights through a tool, then reaches data it should never touch. The extra access is often standing permission nobody removed.

Also called: privilege escalation attack, priv esc, escalation of privilege, permission escalation, excessive privilege

Updated

Why privilege escalation matters

An AI agent with too much access is a bigger risk than a person with too much access. The agent runs day and night, and it can act in seconds. If it can reach systems it was never meant to, one bad instruction can spread far.

Where teams get it wrong

Teams often grant broad access to get an agent working, then forget to trim it. That "temporary" permission becomes permanent. The agent also borrows the rights of whoever it acts for, so it can quietly inherit a manager's access.

  • Give each agent the least access it needs to do its job.

  • Set access to expire, so nothing lingers after a task ends.

  • Review what every agent can reach on a set schedule.

  • Remove old permissions the moment an agent's job changes.

A simple example

A support agent gets read access to one database for a quick fix. Months later it still has that access, plus new tools that let it write, not just read. Now it can change records nobody expected. That is privilege escalation, built one grant at a time.

Let's figure out what you actually need.

No pitch. No pressure. Every conversation starts with a senior practitioner, not a sales team. We'll tell you straight where you stand and whether we're the right fit. If we're not, we'll point you to who is.