When an agent misuses its elevated permissions to perform actions it shouldn't, tricked by user input.