[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-573438-105":53,"doc-detail-573438-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","owasp-top-10-for-llm-applications-2025-version-2025-overview","OWASP Top 10 for LLM Applications 2025 - Version 2025 - Overview","","OWASP Top 10 for LLM Applications 2025 outlines major security risks affecting large language model systems, organized as LLM01 through LLM09. It details each category’s description, common examples, prevention and mitigation strategies, example attack scenarios, and reference links, along with related frameworks and taxonomies. The revision history and license and usage section (Creative Commons CC BY-SA 4.0) set distribution and attribution requirements for using and adapting the material.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/owasp-top-10-for-llm-applications-2025-version-2025-overview/573438/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/owasp-top-10-for-llm-applications-2025-version-2025-overview/573438.png","ImageObject",442,249,{"name":88,"@type":89},"Well Done","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-16","2026-10-14",true,{"@type":98,"interactionType":99,"userInteractionCount":76},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What does the document cover in the OWASP Top 10 for LLM Applications 2025?","Question",{"text":108,"@type":109},"It presents major LLM security risk categories (LLM01 through LLM09), including descriptions, common examples, prevention and mitigation strategies, example attack scenarios, and reference links.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"How is the 2025 Top 10 structured for each risk category?",{"text":113,"@type":109},"Each category includes a description, common examples of vulnerability or risk, prevention and mitigation strategies, example attack scenarios, and reference links, often followed by related frameworks and taxonomies.",{"name":115,"@type":106,"acceptedAnswer":116},"What license and usage terms apply to this document?",{"text":117,"@type":109},"The document is licensed under Creative Commons CC BY-SA 4.0, allowing sharing and adaptation with appropriate attribution and share-alike distribution, without additional restrictions.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},573438,1792111017,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":76,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":135,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":30},5909892210082,"https://ap-avatar.wpscdn.com/avatar/56001069da27c9f41e8?x-image-process=image/resize,m_fixed,w_180,h_180&k=1789614185077863061","OWASP Top 10 for  \nLLM Applications 2025  \nVersion 2025  \nNovember 18, 2024  \nOWASP PDF v4 .2.0a 20241114-202703  \nLICENSEAND USAGE  \nThis document is licensed under Creative Commons, CC BY-SA 4.0.  \nYou are free to:  \nShare—copy and redistribute the material in any medium or format for any purpose, even commercially.  \nAdapt—remix, transform, and build upon the material for any purpose, even commercially.  \nThe licensor cannot revoke these freedoms as long as you follow the license terms.  \nUnder the following terms:  \nAttribution—You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in anyway that suggests the licensor endorses you or your use.  \nShareAlike—If you remix, transform, or build upon the material, you must distribute your contributions under the same license as the original.  \nNo additional restrictions—You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.  \nLink to full license text: [https://creativecommons.org/licenses/by-sa/4 .0/legalcode](https://creativecommons.org/licenses/by-sa/4 .0/legalcode)  \nThe information provided in this document does not, and is not intended to constitute legal advice. All information is for general informational purposes only.  \nThis document contains links to other third-party websites. Such links are only for convenience and OWASP does not recommend or endorse the contents ofthe third-party sites.  \nREVISION HISTORY  \n2023-08-01 Version 1.0 Release 2023-10-16 Version 1.1 Release 2024-11-18 Version 2025 Release  \nTable of Contents  \nLetter from the Project Leads ...................................... 1  \nWhat’s New in the 2025 Top 10 ........................................ 1  \nMoving Forward ................................................. 2  \nLLM01:2025 Prompt Injection ...................................... 3  \nDescription .................................................... 3  \nTypes of Prompt Injection Vulnerabilities .................................. 3  \nPrevention and Mitigation Strategies .................................... 4  \nExample Attack Scenarios ........................................... 5  \nReference Links ................................................. 6  \nRelated Frameworks and Taxonomies .................................... 6  \nLLM02:2025 Sensitive Information Disclosure .......................... 7  \nDescription .................................................... 7  \nCommon Examples of Vulnerability ..................................... 7  \nPrevention and Mitigation Strategies .................................... 8  \nExample Attack Scenarios ........................................... 9  \nReference Links ................................................. 9  \nRelated Frameworks and Taxonomies ................................... 9  \nLL M03:2025 Supply Chain ........................................ 11  \nDescription .................................................... 11  \nCommon Examples of Risks .......................................... 11  \nPrevention and Mitigation Strategies .................................... 12  \nSample Attack Scenarios ........................................... 13  \nReference Links ................................................ 15  \nRelated Frameworks and Taxonomies ................................... 15  \nLL M04: Data and Model Poisoning .................................. 16  \nDescription ................................................... 16  \nCommon Examples of Vulnerability ..................................... 16  \nPrevention and Mitigation Strategies .................................... 17  \nExample Attack Scenarios .......................................... 17  \nReference Links ................................................ 18  \nRelated Frameworks and Taxonomies ................................... 18  \nLLM05:2025 Improper Output Handling ..................","cbCaipYoTduxpizM","https://ap.wps.com/l/cbCaipYoTduxpizM","pdf",10716216,45,"English","# Letter from the Project Leads\n# What’s New in the 2025 Top 10\n# Moving Forward\n# LLM01:2025 Prompt Injection\n## Description\n## Types of Prompt Injection Vulnerabilities\n## Prevention and Mitigation Strategies\n## Example Attack Scenarios\n## Reference Links\n## Related Frameworks and Taxonomies\n# LLM02:2025 Sensitive Information Disclosure\n## Description\n## Common Examples of Vulnerability\n## Prevention and Mitigation Strategies\n## Example Attack Scenarios\n## Reference Links\n## Related Frameworks and Taxonomies\n# LLM03:2025 Supply Chain\n## Description\n## Common Examples of Risks\n## Prevention and Mitigation Strategies\n## Sample Attack Scenarios\n## Reference Links\n## Related Frameworks and Taxonomies\n# LLM04: Data and Model Poisoning\n## Description\n## Common Examples of Vulnerability\n## Prevention and Mitigation Strategies\n## Example Attack Scenarios\n## Reference Links\n## Related Frameworks and Taxonomies\n# LLM05:2025 Improper Output Handling\n## Description\n## Common Examples of Vulnerability\n## Prevention and Mitigation Strategies\n## Example Attack Scenarios\n## Reference Links\n# LLM06:2025 Excessive Agency\n## Description\n## Common Examples of Risks\n## Prevention and Mitigation Strategies\n## Example Attack Scenarios\n## Reference Links\n# LLM07:2025 System Prompt Leakage\n## Description\n## Common Examples of Risk\n## Prevention and Mitigation Strategies\n## Example Attack Scenarios\n## Reference Links\n## Related Frameworks and Taxonomies\n# LLM08:2025 Vector and Embedding Weaknesses\n## Description\n## Common Examples of Risks\n## Prevention and Mitigation Strategies\n## Example Attack Scenarios\n## Reference Links\n# LLM09:2025 Misinformation\n## Description","[{\"question\":\"What does the document cover in the OWASP Top 10 for LLM Applications 2025?\",\"answer\":\"It presents major LLM security risk categories (LLM01 through LLM09), including descriptions, common examples, prevention and mitigation strategies, example attack scenarios, and reference links.\"},{\"question\":\"How is the 2025 Top 10 structured for each risk category?\",\"answer\":\"Each category includes a description, common examples of vulnerability or risk, prevention and mitigation strategies, example attack scenarios, and reference links, often followed by related frameworks and taxonomies.\"},{\"question\":\"What license and usage terms apply to this document?\",\"answer\":\"The document is licensed under Creative Commons CC BY-SA 4.0, allowing sharing and adaptation with appropriate attribution and share-alike distribution, without additional restrictions.\"}]","OWASP Top 10 for LLM Applications 2025 - Version 2025 - Overview | PDF",1791939743]