Vulnerability / research
Proofpoint demonstrates how third-party agent consent can grant access in Microsoft Entra
Reported
Published here
What happened
Proofpoint tested Microsoft Entra Agent ID and found that approving a third-party agent blueprint could allow the blueprint owner to create agent identities in the approving tenant. The resulting access depended on permissions the user or administrator granted.
Parties and reporting
Where this happened
Research, tests and decoys. Lab studies, demonstrations, sandboxed evaluations, honeypots and disclosed flaws without a documented real-world victim. There is no victim location to map. Explore the world map.
AI tools and systems: Microsoft Entra Agent ID, Third-party agent blueprints, OAuth consent
Outcome
Proofpoint demonstrated access in its test tenants. It observed silent inheritance for delegated permissions granted through user consent and reported no known use of this technique against real organizations.
Operating lesson
Review who can approve third-party agent blueprints and audit new blueprint and agent identities alongside other application grants.
Evidence and limits
November 9 is the original publication. The demonstration required consent and granted permissions. Proofpoint did not identify an affected customer, active campaign or confirmed victim.