CVE-2026-95328

Associating and preserving security attributes such as original source identity prevents the loss of provenance that creates the confused deputy.

Access enforcement directly stops a component from acting on forwarded requests without verifying original source authorizations.

Information flow enforcement requires preserving and checking source attributes before forwarding requests outside the trust boundary.

Boundary protection limits and inspects external forwarding, reducing the ability of an intermediary to act as an unintended proxy.

A.5.15 only requires defining and documenting an access control policy plus requirements; it does not itself enforce rules or stop a confused-deputy proxy from being introduced or exploited.

A.5.16 governs identity lifecycle, uniqueness, accountability and timely removal to support proper access rights assignment; it has no bearing on preserving original request sources or stopping confused-deputy proxying when a product forwards an upstream request.

Explicit access-rights assignment can restrict the product’s ability to act as an unintended proxy for external actors.

Privileged-access controls limit the rights the product may exercise on behalf of upstream callers, mitigating confused-deputy abuse.

Network-security controls can enforce source validation and prevent the product from blindly proxying traffic to external actors.

Secure-SDLC practices include design reviews that detect and eliminate confused-deputy proxy patterns before deployment.