This is post #2 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.

Your customer service agent has access to an email tool. Makes sense. It needs to send order confirmations.

But that same email tool can also send emails to anyone. With any content. Including your entire customer database as an attachment.

The agent...