OWASP Top 10 for LLM Applications 2025 - Version 2025 - Overview

Oct 14, 2026

OWASP Top 10 for LLM Applications 2025 outlines major security risks affecting large language model systems, organized as LLM01 through LLM09. It details each category’s description, common examples, prevention and mitigation strategies, example attack scenarios, and reference links, along with related frameworks and taxonomies. The revision history and license and usage section (Creative Commons CC BY-SA 4.0) set distribution and attribution requirements for using and adapting the material.

LanguageEnglish

CategoryGeneral

FormatPDF

Pages45

Reading Time16 min

AccessFree to download

Letter from the Project Leads

What’s New in the 2025 Top 10

Moving Forward

LLM01:2025 Prompt Injection

Description

Types of Prompt Injection Vulnerabilities

Prevention and Mitigation Strategies

Example Attack Scenarios

Reference Links

Related Frameworks and Taxonomies

LLM02:2025 Sensitive Information Disclosure

Description

Common Examples of Vulnerability

Prevention and Mitigation Strategies

Example Attack Scenarios

Reference Links

Related Frameworks and Taxonomies

LLM03:2025 Supply Chain

Description

Common Examples of Risks

Prevention and Mitigation Strategies

Sample Attack Scenarios

Reference Links

Related Frameworks and Taxonomies

LLM04: Data and Model Poisoning

Description

Common Examples of Vulnerability

Prevention and Mitigation Strategies

Example Attack Scenarios

Reference Links

Related Frameworks and Taxonomies

LLM05:2025 Improper Output Handling

Description

Common Examples of Vulnerability

Prevention and Mitigation Strategies

Example Attack Scenarios

Reference Links

LLM06:2025 Excessive Agency

Description

Common Examples of Risks

Prevention and Mitigation Strategies

Example Attack Scenarios

Reference Links

LLM07:2025 System Prompt Leakage

Description

Common Examples of Risk

Prevention and Mitigation Strategies

Example Attack Scenarios

Reference Links

Related Frameworks and Taxonomies

LLM08:2025 Vector and Embedding Weaknesses

Description

Common Examples of Risks

Prevention and Mitigation Strategies

Example Attack Scenarios

Reference Links

LLM09:2025 Misinformation

Description

OWASP Top 10 for LLM Applications 2025 Version 2025 November 18, 2024 OWASP PDF v4 .2.0a 20241114-202703 LICENSEAND USAGE This document is licensed under Creative Commons, CC BY-SA 4.0. You are free to: Share—copy and redistribute the material in any medium or format for any purpose, even commercially. Adapt—remix, transform, and build upon the material for any purpose, even commercially. The licensor cannot revoke these freedoms as long as you follow the license terms. Under the following terms: Attribution—You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in anyway that suggests the licensor endorses you or your use. ShareAlike—If you remix, transform, or build upon the material, you must distribute your contributions under the same license as the original. No additional restrictions—You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits. Link to full license text: [https://creativecommons.org/licenses/by-sa/4 .0/legalcode](https://creativecommons.org/licenses/by-sa/4 .0/legalcode) The information provided in this document does not, and is not intended to constitute legal advice. All information is for general informational purposes only. This document contains links to other third-party websites. Such links are only for convenience and OWASP does not recommend or endorse the contents ofthe third-party sites. REVISION HISTORY 2023-08-01 Version 1.0 Release 2023-10-16 Version 1.1 Release 2024-11-18 Version 2025 Release Table of Contents Letter from the Project Leads ...................................... 1 What’s New in the 2025 Top 10 ........................................ 1 Moving Forward ................................................. 2 LLM01:2025 Prompt Injection ...................................... 3 Description .................................................... 3 Types of Prompt Injection Vulnerabilities .................................. 3 Prevention and Mitigation Strategies .................................... 4 Example Attack Scenarios ........................................... 5 Reference Links ................................................. 6 Related Frameworks and Taxonomies .................................... 6 LLM02:2025 Sensitive Information Disclosure .......................... 7 Description .................................................... 7 Common Examples of Vulnerability ..................................... 7 Prevention and Mitigation Strategies .................................... 8 Example Attack Scenarios ........................................... 9 Reference Links ................................................. 9 Related Frameworks and Taxonomies ................................... 9 LL M03:2025 Supply Chain ........................................ 11 Description .................................................... 11 Common Examples of Risks .......................................... 11 Prevention and Mitigation Strategies .................................... 12 Sample Attack Scenarios ........................................... 13 Reference Links ................................................ 15 Related Frameworks and Taxonomies ................................... 15 LL M04: Data and Model Poisoning .................................. 16 Description ................................................... 16 Common Examples of Vulnerability ..................................... 16 Prevention and Mitigation Strategies .................................... 17 Example Attack Scenarios .......................................... 17 Reference Links ................................................ 18 Related Frameworks and Taxonomies ................................... 18 LLM05:2025 Improper Output Handling ..................

FAQs

What does the document cover in the OWASP Top 10 for LLM Applications 2025?

It presents major LLM security risk categories (LLM01 through LLM09), including descriptions, common examples, prevention and mitigation strategies, example attack scenarios, and reference links.

How is the 2025 Top 10 structured for each risk category?

Each category includes a description, common examples of vulnerability or risk, prevention and mitigation strategies, example attack scenarios, and reference links, often followed by related frameworks and taxonomies.

What license and usage terms apply to this document?

The document is licensed under Creative Commons CC BY-SA 4.0, allowing sharing and adaptation with appropriate attribution and share-alike distribution, without additional restrictions.

Oct 14, 2026

Upload by Well Done