, a plugin intended to read data connects to a database server using an identity that not only has SELECT permissions, but also UPDATE, INSERT and DELETE permissions Excessive Permissions: An LLM plugin that is designed to perform operations on behalf of a user accesses downstream systems with a generic high-privileged identity.  E. g. , a plugin to read the current user's document store connects to the document repository with a privileged account that has access to all users' files.  OWASP