03:51
2026-07-26
dev.to
ai-agents
Your Authz Checks the Caller. The Model Picked the Tenant.
A developer demonstrated that AI agents can leak cross-tenant data when authorization checks verify the caller but ignore model-authored resource selectors like tenant_id. In tests, 4 of 5 selectors r…