AI Agent Threat Matrix
Matrix/Privilege Escalation/T-4003
T-4003validated

Tool Parameter Injection

Inject malicious parameters into tool calls to escalate privileges or bypass validation

Tactic

Privilege Escalation (Stage 4)

Escalate capabilities beyond declared scope or bypass authorization

Attack Class

MCP-EXPLOIT

Attacking Model Context Protocol server configurations, tool registrations, and inter-server trust

Evidence

validated

Reproduced in controlled lab environment (DVAA) with documented steps.

DVAA Validation

MCP parameter injection

Detection (HackMyAgent)

PERM-001
npx hackmyagent secure --ci

Defense (OASB Controls)

OASB 2.1OASB 2.2OASB 2.3OASB 2.4OASB 2.5

How to Cite

AI Agent Threat Matrix T-4003 (Tool Parameter Injection). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-4003
← Back to Matrix