GoKawiilNoma Labs Exposes 'Workflow Identity Hijacking' Flaw in Enterprise AI Pipelines
Noma Labs researchers disclosed an authorization design flaw in enterprise AI pipelines that lets attackers submit ordinary-looking requests through unauthenticated channels—like support inboxes or web forms—to trigger actions using elevated internal permissions. They demonstrated this by sending a support email that tricked an AI workflow into retrieving and forwarding a finance director's private email contents to an attacker.
GoKawiil's interpretation of the reporting above, not reported fact.
The flaw arises because AI workflows separate the identity of the person making a request from the permissions used to execute it, meaning the system trusts the request's content rather than verifying who is actually authorized to make it. As enterprises increasingly automate internal processes with AI, this gap could let unauthenticated outsiders extract sensitive internal data without ever breaching traditional access controls.
- Noma Labs identified 'workflow identity hijacking' as a new AI attack technique targeting enterprise pipelines.
- The flaw exploits the disconnect between a request's origin and the permissions used to fulfill it.
- Attackers can exploit unauthenticated entry points like support emails to extract sensitive internal information.
Yubico YubiKey 5 NFC Security Key — When attacks hinge on identity and authorization gaps, hardware-backed authentication is a solid line of defense for the human side of the equation. The YubiKey 5 NFC plugs into USB-A or taps against a phone over NFC to confirm logins with a physical touch, supporting FIDO2/WebAuthn, OTP and smart card protocols across major work accounts. It's a durable, battery-free key that lives on your keyring and makes account takeover far harder.
See Yubico YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: darkreading.com — Elizabeth Montalbano, 2026-09-09
Published there as: “Identity-Based AI Attack Threatens Security of Enterprise Data”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.