Privilege Compromise

Attackers exploit mismanaged roles, overly broad permissions, or dynamic and inherited privilege to escalate an agent's access beyond its intended scope. In a multi-agent system: A troubleshooting agent's temporary administrative privilege, granted for a single step, is retained and later abused to reach data outside its original role. Primary mitigation: Le…

Use this profile to understand the building block briefly, place it in the model, and switch to the 360° assessment when needed.

Content type

Concept

Theoretical construct: explains a term, principle, or mental model.

Classification level

Structure

What organizes, connects, or makes decisions possible.

Available perspectives

Open this building block directly in an already curated view.

360°

In brief

Privilege Compromise in brief

Privilege compromise occurs when an attacker obtains or abuses elevated permissions.

Where does it come from?

The risk comes from operating-system and network security and was systematised as a technique in threat models such as MITRE ATT&CK.

The mental model

An intruder enters through a side door and then tries to obtain the master key to reach more rooms.

Key building blocks

Core idea

The conceptual focus and typical structure of the approach.

Practice context

Concrete use in a working context.

When is it useful?

It helps teams make privilege compromise decisions explicit, reviewable, and safer in practice.

attack.mitre.org

Why is this building block relevant?

Attackers exploit mismanaged roles, overly broad permissions, or dynamic and inherited privilege to escalate an agent's access beyond its intended scope.