AI workflows may be creating a dangerous new authorization blind spot

Researchers have identified "workflow identity hijacking," an attack where unauthenticated users can trigger privileged AI workflows by sending normal requests through unguarded entry points like support inboxes or web forms. The core problem is an authorization design flaw: the identity of the person who starts the workflow is separate from the identity used to execute it, allowing AI systems to perform high-privilege actions (like accessing financial data) using service account credentials instead of checking the requester's actual permissions.