# 13. Agentic AI

[Catalog](https://mathborgess.github.io/ai-security-wiki/wiki/index.md) · [Audit workflow](https://mathborgess.github.io/ai-security-wiki/wiki/methodology.md)

- [DASF-R-13.1](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.1.md) — Memory Poisoning
- [DASF-R-13.2](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.2.md) — Tool Misuse
- [DASF-R-13.3](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.3.md) — Privilege Compromise
- [DASF-R-13.4](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.4.md) — Resource Overload
- [DASF-R-13.5](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.5.md) — Cascading Hallucination Attacks
- [DASF-R-13.6](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.6.md) — Intent Breaking & Goal Manipulation
- [DASF-R-13.7](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.7.md) — Misaligned & Deceptive Behaviors
- [DASF-R-13.8](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.8.md) — Repudiation & Untraceability
- [DASF-R-13.9](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.9.md) — Identity Spoofing & Impersonation
- [DASF-R-13.10](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.10.md) — Overwhelming Human in the Loop
- [DASF-R-13.11](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.11.md) — Unexpected RCE and Code Attacks
- [DASF-R-13.12](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.12.md) — Agent Communication Poisoning
- [DASF-R-13.13](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.13.md) — Rogue Agents in Multi-Agent Systems
- [DASF-R-13.14](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.14.md) — Human Attacks on Multi-Agent Systems
- [DASF-R-13.15](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.15.md) — Human Manipulation
- [DASF-R-13.16](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.16.md) — Prompt Injection
- [DASF-R-13.17](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.17.md) — Confused Deputy
- [DASF-R-13.18](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.18.md) — Tool Poisoning
- [DASF-R-13.19](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.19.md) — Credential and Token Exposure
- [DASF-R-13.20](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.20.md) — Insecure Server Configuration
- [DASF-R-13.21](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.21.md) — Supply Chain Attacks
- [DASF-R-13.22](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.22.md) — Excessive Permissions and Scope Creep
- [DASF-R-13.23](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.23.md) — Data Exfiltration
- [DASF-R-13.24](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.24.md) — Context Spoofing and Manipulation
- [DASF-R-13.25](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.25.md) — Insecure Communication
- [DASF-R-13.26](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.26.md) — Malicious Server Connection
- [DASF-R-13.27](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.27.md) — Insecure Credential Storage
- [DASF-R-13.28](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.28.md) — UI/UX Deception
- [DASF-R-13.29](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.29.md) — Insufficient Server Validation
- [DASF-R-13.30](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.30.md) — Client-Side Data Leakage
- [DASF-R-13.31](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.31.md) — Excessive Permission Granting
- [DASF-R-13.32](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.32.md) — Client-Side Code Execution
- [DASF-R-13.33](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.33.md) — Insecure Communication Handling
- [DASF-R-13.34](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.34.md) — Session and State Management Failures
- [DASF-R-13.35](https://mathborgess.github.io/ai-security-wiki/wiki/risks/13.35.md) — Update and Patch Management