Confused Deputy

A flaw where a malicious party abuses a trusted intermediary's permissions (like an agent) to do what it couldn't do itself.