---
id: 7444
title: "Exploiting Tool and Function Calling in LLM Agents"
source_domain: blog.sentry.security
source_url: "https://blog.sentry.security/exploiting-tool-and-function-calling-in-llm-agents/"
published_at: "2026-05-21T12:54:13Z"
tags: ["ai-security", "prompt-injection", "ai-agents", "llm", "owasp", "tool-calling"]
phying_url: "https://phying.com/item/7444"
lang: en
---

# Exploiting Tool and Function Calling in LLM Agents

## Summary

Exploiting tool and function calling in LLM agents: exposed messages[], privileged roles, and unescaped control tokens let attackers steer agent actions, echoing OWASP LLM06 Excessive Agency.

## Intelligence Metadata

- **Sources:** blog.sentry.security
- **Published:** 2026-05-21T12:54:13Z
- **Original:** https://blog.sentry.security/exploiting-tool-and-function-calling-in-llm-agents/
- **Phying News:** https://phying.com/item/7444