{"id":"https://openalex.org/W7165363951","doi":"https://doi.org/10.48550/arxiv.2606.20023","title":"When Lower Privileges Suffice: Investigating Over-Privileged Tool Selection in LLM Agents","display_name":"When Lower Privileges Suffice: Investigating Over-Privileged Tool Selection in LLM Agents","publication_year":2026,"publication_date":"2026-06-18","ids":{"openalex":"https://openalex.org/W7165363951","doi":"https://doi.org/10.48550/arxiv.2606.20023"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.20023","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.20023","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.20023","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138972856","display_name":"Kaiyue Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Kaiyue","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010834843","display_name":"Yuyan Bu","orcid":"https://orcid.org/0000-0002-1875-5044"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bu, Yuyan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107829323","display_name":"Jingwei Yi","orcid":"https://orcid.org/0009-0001-2786-6395"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yi, Jingwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138987374","display_name":"Yuchi Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yuchi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064648779","display_name":"Biyu Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Biyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138991995","display_name":"Juntao Dai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dai, Juntao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5105753106","display_name":"Hu S","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Songlin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138977321","display_name":"Yaodong Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Yaodong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.32109999656677246,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.32109999656677246,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.06689999997615814,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.06650000065565109,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.7027000188827515},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4876999855041504},{"id":"https://openalex.org/keywords/transient","display_name":"Transient (computer programming)","score":0.3772999942302704},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.35850000381469727},{"id":"https://openalex.org/keywords/mainstream","display_name":"Mainstream","score":0.336899995803833}],"concepts":[{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.7027000188827515},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6359000205993652},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5379999876022339},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4876999855041504},{"id":"https://openalex.org/C2780799671","wikidata":"https://www.wikidata.org/wiki/Q17087362","display_name":"Transient (computer programming)","level":2,"score":0.3772999942302704},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.35850000381469727},{"id":"https://openalex.org/C2777617010","wikidata":"https://www.wikidata.org/wiki/Q18957","display_name":"Mainstream","level":2,"score":0.336899995803833},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.2856000065803528},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.26409998536109924},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.2556999921798706},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2533999979496002}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.20023","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.20023","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.20023","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.20023","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7360191941261292,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"LLM":[1,96],"agents":[2,60,97,139],"increasingly":[3],"select":[4],"tools":[5,10,63,144],"autonomously,":[6],"their":[7],"choices":[8,27],"among":[9,94],"with":[11],"different":[12],"privileges":[13],"become":[14],"safety-relevant.":[15],"However,":[16],"prior":[17],"tool-selection":[18],"studies":[19],"focus":[20],"on":[21],"safety-agnostic":[22],"metadata":[23],"preferences,":[24],"leaving":[25],"privilege-sensitive":[26],"underexplored.":[28],"To":[29],"address":[30],"this":[31,155],"gap,":[32],"we":[33,86],"study":[34],"over-privileged":[35,89],"tool":[36,48,76,90,118,161],"selection,":[37],"in":[38],"which":[39],"an":[40],"agent":[41],"selects":[42],"or":[43],"escalates":[44],"to":[45,57,116,140],"a":[46,50,133],"higher-privilege":[47,62],"despite":[49,64],"sufficient":[51,65,142],"lower-privilege":[52,66,143],"alternative.":[53],"We":[54,105,130],"introduce":[55,132],"ToolPrivBench":[56],"evaluate":[58],"whether":[59],"choose":[61],"alternatives,":[67],"measuring":[68],"both":[69],"initial":[70],"selection":[71,91],"and":[72,81,98,145],"escalation":[73],"after":[74],"transient":[75,103,128],"failures.":[77,104,129],"Across":[78],"eight":[79],"domains":[80],"five":[82],"recurring":[83],"risk":[84],"patterns,":[85],"find":[87,107],"that":[88,108,137,154],"is":[92,99],"common":[93],"mainstream":[95],"further":[100,106],"amplified":[101],"by":[102],"general":[109,165],"safety":[110],"alignment":[111],"does":[112],"not":[113],"reliably":[114],"transfer":[115],"least-privilege":[117],"choice,":[119],"while":[120,163],"prompt-level":[121],"controls":[122],"provide":[123],"only":[124,147],"limited":[125],"mitigation":[126,151],"under":[127],"therefore":[131],"privilege-aware":[134],"post-training":[135],"defense":[136,156],"teaches":[138],"prefer":[141],"escalate":[146],"when":[148],"necessary.":[149],"Our":[150],"experiments":[152],"show":[153],"substantially":[157],"reduces":[158],"unnecessary":[159],"high-privilege":[160],"use":[162],"preserving":[164],"capabilities.":[166]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-20T00:00:00"}