Dictionary entry Trending
excessive agency
also over-privileged AI agent or overprivileged agent
Definition of excessive agency
-
: an AI security vulnerability in which a model or agent has more functions, permissions, or autonomy than its intended task requires, allowing an error or manipulated instruction to cause damaging actions
- Giving a mail-summary agent permission to send and delete messages created a case of excessive agency.
- The security review reduced excessive agency by replacing an administrator token with a read-only credential and requiring approval before payments.
Advertisement
Origin & history
first known use2023
OWASP included Excessive Agency in its 2023 Top 10 for Large Language Model Applications and retained it as LLM06 in the 2025 edition. OWASP describes three common root causes: excessive functionality, excessive permissions, and excessive autonomy.
Editorial references
Sources & further reading
- LLM06:2025 Excessive Agency↗ OWASP GenAI Security Project
- Excessive agency - Generative AI Lens↗ Amazon Web Services
- AI agents are gaining employee-level access. How partners can stop over-privileged automation↗ ITPro · 2026-10-29
Test yourself
Which of these is the meaning of excessive agency?
Cite this entry
"Excessive agency." AI Dictionary, Dadgogo, https://dadgogo.com/dictionary/excessive-agency/. Accessed 31 Oct. 2026.
Dictionary entries near excessive agency
Advertisement