Its scary to see that these vulnerabilities aren’t just a one off issue but more a symptom of how authorization works today.

Seems similar to the confused deputy problem which im surprised still hasnt been solved for agents yet