OWASP LLM Top 10

AIR-SEC-010Prompt Injection AIR-SEC-025Tool Chain Manipulation and Injection AIR-SEC-029Agent-Mediated Credential Discovery and Harvesting

AIR-RC-001Information Leaked To Hosted Model AIR-SEC-002Information Leaked to Vector Store

AIR-SEC-008Tampering With the Foundational Model AIR-SEC-009Data Poisoning

AIR-SEC-010Prompt Injection AIR-SEC-009Data Poisoning

AIR-SEC-009Data Poisoning

AIR-SEC-010Prompt Injection AIR-OP-018Model Overreach / Expanded Use AIR-SEC-024Agent Action Authorization Bypass AIR-SEC-029Agent-Mediated Credential Discovery and Harvesting

AIR-OP-014Inadequate System Alignment

AIR-SEC-002Information Leaked to Vector Store

AIR-OP-020Reputational Risk AIR-OP-004Hallucination and Inaccurate Outputs AIR-OP-005Foundation Model Versioning AIR-OP-006Non-Deterministic Behaviour

AIR-SEC-010Prompt Injection AIR-OP-007Availability of Foundational Model