OWASP Top 10 · GenAI / LLM · EN · OWASP Evolution

Evolution of the main risks for generative model applications. 2025 · 2026.

OWASP Top 10 · GenAI / LLM

OWASP Top 10 for LLM Applications 2025

• LLM01: Prompt Injection
• LLM02: Sensitive Information Disclosure
• LLM03: Supply Chain
• LLM04: Data and Model Poisoning
• LLM05: Improper Output Handling
• LLM06: Excessive Agency
• LLM07: System Prompt Leakage
• LLM08: Vector and Embedding Weaknesses
• LLM09: Misinformation
• LLM10: Unbounded Consumption

OWASP GenAI LLM Top 10 2026

• LLM01: Prompt Injection
• LLM02: Sensitive Information Disclosure
• LLM03: Excessive Agency
• LLM04: Supply Chain
• LLM05: Data and Model Poisoning
• LLM06: Unbounded Consumption
• LLM07: Misinformation
• LLM08: Hidden Context Exposure
• LLM09: Vector and Embedding Weaknesses
• LLM10: Improper Output Handling

Buy me a coffee