Agent Security
Confused Deputy
Also: confused deputy problem
A program with real authority gets tricked into using that authority for someone who should not have it.
In more detail
An AI agent is a textbook deputy: it holds the user's credentials and acts on their behalf, and it takes direction from text that anyone may have written. When injected content makes it use its authority for the attacker, the agent has been confused in exactly this sense. The classic remedy is to bind authority to the specific request, with scoped, short-lived credentials, rather than letting the deputy use everything it holds.