CVE-2026-46331

Govern AI agents and SaaS connectors as privileged authority paths

→Organizations should govern AI agents and SaaS connectors as privileged authority paths. They should disable or tightly scope agent creation, require admin approval and audit for new agents and connectors, reduce OAuth scopes, use least-privilege service identities, add egress controls, treat retrieved content as untrusted input, strip hidden comments, and require human approval before write, merge, credential, or outbound actions.

Treat enterprise AI agents and SaaS connectors as systems that can exercise authority, not as ordinary chat features. Limit who can create and connect them, minimize scopes, audit changes, constrain egress, treat retrieved content as untrusted, remove hidden instructions where feasible, and require human approval before sensitive actions. Avoid presenting named incident anecdotes as verified compromises unless primary sources are attached.