Giving a system more reach, permissions, or autonomy than the task requires. Injection is the input-side compromise; excessive agency is what gives it consequences.