CWE-250: Execution with Unnecessary Privileges
Also known as: Excessive Agency
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Overview
CWE-250 (Execution with Unnecessary Privileges) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.