Misconfigured agentic AI workflows pose significant risks, potentially leading to unauthorized access to sensitive data. The Confused Deputy problem, exacerbated by second-order prompt injection, enables privilege escalation. Implementing Zero Trust principles and specific controls, such as supervised execution and continuous monitoring, is crucial for safeguarding against these vulnerabilities in regulated environments.