OWASP LLM Top 10
The OWASP Top 10 for LLM Applications is a community-maintained list of the most critical security risks for systems that integrate large language models, modeled on the long-running OWASP Top 10 for web applications.
The OWASP Top 10 for LLM Applications is a community-maintained ranked list of the most critical security risks faced by applications that integrate large language models. It is produced by the OWASP Gen AI Security Project and follows the format of the long-running OWASP Top 10 for web applications, with each entry describing the risk, common attack patterns, example scenarios, and recommended mitigations. The 2025 edition keeps prompt injection at the top of the list as LLM01, covering both direct and Indirect Prompt Injection under one category. Other entries address sensitive information disclosure, supply chain risks for models and components, data and model poisoning, improper output handling, excessive agency, system prompt leakage, vector and embedding weaknesses, misinformation, and unbounded resource consumption. The document is used as a baseline by procurement teams, auditors, and security engineers when evaluating LLM-integrated products, and as a starting point for threat modeling. It is intentionally framework-agnostic and updated periodically as deployment patterns and observed attacks evolve. See Prompt Injection in LLM Systems for detail on the top-ranked risk.