{"id":"https://openalex.org/W7161300718","doi":"https://doi.org/10.48550/arxiv.2605.14859","title":"Do Coding Agents Understand Least-Privilege Authorization?","display_name":"Do Coding Agents Understand Least-Privilege Authorization?","publication_year":2026,"publication_date":"2026-05-14","ids":{"openalex":"https://openalex.org/W7161300718","doi":"https://doi.org/10.48550/arxiv.2605.14859"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.14859","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14859","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.14859","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136229773","display_name":"Zheng Yan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yan, Zheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136240906","display_name":"Jingxiang Weng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Weng, Jingxiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071015273","display_name":"Charles Chen","orcid":"https://orcid.org/0000-0002-2203-0433"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Charles","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136258016","display_name":"Dengyun Peng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peng, Dengyun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136190363","display_name":"Ethan Qin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qin, Ethan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136260080","display_name":"Jiannan Guan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guan, Jiannan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136236683","display_name":"Jinhao Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Jinhao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136211727","display_name":"Qiming Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Qiming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136265533","display_name":"Yixin Yuan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yuan, Yixin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136241695","display_name":"Fanqing Meng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Meng, Fanqing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070740538","display_name":"Carl Che","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Che, Carl","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136240414","display_name":"Mengkang Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Mengkang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6287999749183655,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.6287999749183655,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.2393999993801117,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.02319999970495701,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.7723000049591064},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.5680999755859375},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4984999895095825},{"id":"https://openalex.org/keywords/coding","display_name":"Coding (social sciences)","score":0.46000000834465027},{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.41359999775886536},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.39410001039505005},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.39250001311302185},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.36980000138282776}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8199999928474426},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.7723000049591064},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.5680999755859375},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4984999895095825},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.46810001134872437},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.46000000834465027},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.41359999775886536},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.39410001039505005},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.39250001311302185},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.36980000138282776},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.3653999865055084},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.3246000111103058},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3221000134944916},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.3125999867916107},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.3109000027179718},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.2939999997615814},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C204495577","wikidata":"https://www.wikidata.org/wiki/Q1205349","display_name":"Callback","level":2,"score":0.2632000148296356},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26190000772476196},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.25540000200271606}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.14859","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14859","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.14859","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.14859","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7362569570541382,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"coding":[1],"agents":[2],"gain":[3],"access":[4],"to":[5,25,61,206],"shells,":[6],"repositories,":[7],"and":[8,58,66,79,84,166,186,194],"user":[9],"files,":[10],"least-privilege":[11],"authorization":[12,90,130],"becomes":[13],"a":[14,52,55,62,68,93,128,157,179],"prerequisite":[15],"for":[16,82,192],"safe":[17],"deployment:":[18],"an":[19],"agent":[20],"should":[21],"receive":[22],"enough":[23],"authority":[24,31],"complete":[26],"the":[27,105,154,184],"task,":[28],"without":[29],"unnecessary":[30,169],"that":[32,89,149],"exposes":[33],"sensitive":[34,113],"surfaces.":[35],"To":[36],"study":[37],"whether":[38,143],"current":[39],"models":[40,99,210],"can":[41],"infer":[42],"this":[43,121,199],"boundary":[44],"themselves,":[45],"we":[46],"first":[47,177],"introduce":[48],"permission-boundary":[49],"inference,":[50],"where":[51],"model":[53,125],"maps":[54],"task":[56,185],"instruction":[57],"terminal":[59,73],"environment":[60],"file-level":[63],"read/write/execute":[64],"policy,":[65],"AuthBench,":[67],"benchmark":[69],"of":[70],"120":[71],"realistic":[72],"tasks":[74],"with":[75],"human-reviewed":[76],"permission":[77],"labels":[78],"executable":[80],"validators":[81],"utility":[83],"attack":[85,213],"outcomes.":[86],"AuthBench":[87],"shows":[88],"is":[91,153],"not":[92,119],"simple":[94],"conservative-versus-permissive":[95],"calibration":[96],"problem:":[97],"frontier":[98],"often":[100],"omit":[101],"permissions":[102],"required":[103],"by":[104,182,204],"execution":[106],"chain":[107],"while":[108,211],"also":[109],"granting":[110],"unused":[111],"or":[112,145],"accesses.":[114],"Increasing":[115],"inference-time":[116],"reasoning":[117,133],"does":[118],"resolve":[120],"mismatch.":[122],"Instead,":[123],"each":[124,189],"moves":[126],"toward":[127],"model-specific":[129],"attractor:":[131],"more":[132,136],"makes":[134],"it":[135],"consistent":[137],"in":[138],"its":[139],"own":[140],"failure":[141],"mode,":[142],"broad-but-exposed":[144],"tight-but-brittle.":[146],"This":[147],"suggests":[148],"direct":[150],"policy":[151,181],"generation":[152,159],"bottleneck,":[155],"because":[156],"single":[158],"must":[160],"both":[161],"discover":[162],"all":[163,168,216],"necessary":[164],"accesses":[165],"reject":[167],"ones.":[170],"We":[171],"therefore":[172],"propose":[173],"Sufficiency-Tightness":[174],"Decomposition,":[175],"which":[176],"generates":[178],"coverage-oriented":[180],"forward-simulating":[183],"then":[187],"audits":[188],"granted":[190],"entry":[191],"grounding":[193],"sensitivity.":[195],"Across":[196],"tested":[197],"models,":[198],"decomposition":[200],"improves":[201],"sensitive-task":[202],"success":[203,214],"up":[205],"15.8%":[207],"on":[208],"tightness-biased":[209],"reducing":[212],"across":[215],"evaluated":[217],"models.":[218]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-16T00:00:00"}