Confused Deputy

A confused deputy is a privileged component tricked into using its authority on behalf of a caller who lacks that authority. A service might accept an attacker-controlled resource identifier and access it using the service’s broader permissions.

The defense is to bind the action to the caller’s authorized resource and intended purpose, rather than assuming the service’s own credentials justify the request. The problem can arise even when the caller is authenticated.