Definition
A security flaw where an AI-powered plugin or chatbot does not properly check who is allowed to see or do what. A low-privilege user—such as a basic subscriber—can exploit the flaw to read private conversation logs, extract stored API keys, or trigger actions they should never have permission to perform.
Why it matters
A single misconfigured chatbot plugin installed on a company website can hand an attacker the credentials to your entire AI stack, including keys that grant billing access to third-party AI providers. Because these plugins are often installed by marketing or operations teams without security review, the exposure can go undetected for months.