Do Coding Agents Understand Least-Privilege Authorization? - Zheng Yan; Jingxiang Weng; Charles Chen; Dengyun Peng; Ethan Qin; Jiannan Guan; Jinhao Liu; Qiming Yu; Yixin Yuan; Fanqing Meng; Carl Che; Mengkang Hu (CoRR, 2026)