# Unconstrained Delegation (User)

So there is a case where a user account can be assigned unconstrained delegation rights that can potentially be abused if certain conditions are met.

While I haven't encountered a scenario where all the conditions are met to exploit this, the research around the attack is very interesting and is something to keep in mind just in case you run into it one day.

{% embed url="<https://exploit.ph/user-constrained-delegation.html>" %}