The Orchestrator's Deputy Has No Scope: Ambient Authority Is the Root Bug in Multi-Agent AI

CVE-2025-53773, CVSS 7.8: a prompt injection causes GitHub Copilot to rewrite .vscode/settings.json...