Banana Navy
Catalog FR
Lab · Threat modeling IA · Fiche détaillée

Privilege escalation and declarative fraud

the attacker obtains rights or actions they do not have by asking and being served (fraudulent request, policy bypass, routing fraud, unauthorized update, workflow escalation).

SheetF13
CategoryE-TB7-01 (elevation of privilege)
Layers15 · Policy Engine, 16 · Workflow Execution, 2 · Session Security, 11 · Intent Detection
Systemvoicebot IA

permissions enforced by the backend outside the model (no role grantable by speech), tool allowlist, deterministic approval for any write, routing fraud detection.

The threat

the attacker obtains rights or actions they do not have by asking and being served (fraudulent request, policy bypass, routing fraud, unauthorized update, workflow escalation).

Angle mortWhy classic frameworks miss it

elevation is not an ACL bug but a property of dialogue with an overly compliant model: I-am-the-admin creates no permission if the backend refuses.

MitigationProposed approach

permissions enforced by the backend outside the model (no role grantable by speech), tool allowlist, deterministic approval for any write, routing fraud detection.

The proposed control
rights granting goes through a deterministic authorization independent of what the model says.

Expected evidence
demonstrate that rights granting goes through a deterministic authorization independent of model speech.

SourcesReferences and public research

MITRE ATLAS 2026.07AML.T0051 LLM Prompt Injection
Recherche publiquePublic research sources: MITRE ATLAS 2026.07 (verified technique mapping), OWASP GenAI (catégories par abus de modèle), and the public risk-voicebot (aivansoul/risk-voicebot) template defining the 20 checkpoints. No client registry data: generic sheet, no rating, no verdict.
couche 15 · Policy Enginecouche 16 · Workflow Executioncouche 2 · Session Securitycouche 11 · Intent Detection

Explore the 20 security layers

MITRE ATLAS 2026.07 · OWASP GenAI · risk-voicebot