Agentic AI auth gaps: why classical IAM stops working

TL;DR: OAuth, JWTs and bearer tokens break down when a non-deterministic agent decides which tools to call, according to VotalAI research, because classical IAM only authenticates a caller once at the edge and cannot evaluate each action, argument and delegation chain in real time. The governance assumption that access can be reviewed after issuance collapses when the decision itself is the attack surface.

Editorial analysis by NHI Mgmt Group, based on content published by VotalAI: “Why Your Agents Need a Different Auth Model: 10 Attacks That Break Classical IAM”.

Key questions

Q: What breaks when AI authorization happens only at login?

A: A login-only model assumes the session stays safe after authentication, but AI systems may make many later decisions and tool calls across multiple services.

Q: Why do sub-agents increase the risk of privilege escalation?

A: Sub-agents increase risk when they inherit the orchestrator's credential or scope, because downstream tools cannot tell which worker actually asked for the action.

Q: How do security teams stop replay attacks against agent tool calls?

A: They should treat each sensitive tool call as a one-time capability, not a reusable session event.

Practitioner guidance

• Define action-level authorisation for every high-risk tool Require the runtime to evaluate each proposed call against the specific tool, resource and arguments before execution, rather than inheriting user-level access from the session.
• Assign separate identities to every sub-agent Mint distinct credentials for each worker and bind parent-child delegation so one agent cannot silently expand another agent's access scope.
• Use single-use capabilities for sensitive tool calls Treat replay resistance as part of authorisation design by issuing short-lived, one-time tokens for actions such as sending mail, moving money or reading scoped records.

Bottom line: Agentic systems break the classical assumption that authentication at the edge is enough to govern downstream action.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →