LLM04: Supply Chain · 2026

The chain includes code, data, models, adapters, formats and platforms

Summary

The chain includes code, data, models, adapters, formats and platforms. Artifacts without provenance or mutable references can introduce hidden behavior.

How the attack works

An adapter from an unverified repository enters model deployment; its provenance and behavior are not evaluated before use.

Example

Vulnerable · Pseudocode

adapter = download("vendor.example/adapter")
model.load_adapter(adapter)
# No provenance or evaluation

Fix: Verify provenance, signatures and versions of models and adapters; evaluate behavior before deployment.

Prevention

Inventory artifacts with signed SBOMs/AIBOMs.
Use digest references and verify signatures and hashes.
Control conversion, merging, quantization and promotion.

Lineage

2025 · LLM03: Supply Chain Moves down to rank 4 in 2026
2026 · LLM04: Supply Chain Moves down from rank 3

2025:LLM03 → 2026:LLM04: Supply Chain moves down from rank 3 to 4.

Sources

Open official source ↗

Buy me a coffee