Privilege inversion is a security failure where a user or process with limited access can reach higher-value functions than intended. Instead of staying inside a narrow read-only or low-trust role, the caller crosses a boundary into administrative, execution, or recovery code paths. This usually happens when software trusts role labels too much, exposes backend services indirectly, or fails to separate user-facing actions from privileged operations.
It matters because attackers often look for these mismatches to turn “safe” access into control of a system. In real environments, a low-privilege account may be able to trigger job handlers, file-processing routines, API methods, or restore workflows that were meant only for trusted operators. Defenders reduce the risk by enforcing least privilege, isolating control planes, validating authorization at every layer, and testing whether each role can truly access only its intended functions.