Definition
When an attacker exploits a vulnerability to gain more permissions or authority than they are supposed to have — for example, a regular user of an AI plugin gaining administrator access, which then allows them to steal API keys, modify AI configurations, or access other users' data.
Why it matters
AI plugins and tools are frequently integrated deeply with business systems and hold sensitive credentials. A single privilege-escalation flaw in an AI tool can hand an attacker the keys to the organisation's entire AI infrastructure.