standard

OWASP LLM Top 10 (prior LLM01-LLM10 numbering)

Earlier edition of the list, used by the AppSec explainer, in which insecure output handling is LLM02, training data poisoning LLM03, supply chain LLM05, sensitive information disclosure LLM06 and excessive agency LLM08.

Known aliases

LLM01-LLM10

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 distinct publisher

The 2026 LLM Top 10 lands: prompt injection still first, hidden context now its own line item

OWASP's refreshed list names hidden context exposure and vector weaknesses, maps all ten risks to nine external frameworks, and moves the identifiers that older policy documents cite.

Publishers:scworld.com

Reality

Evidence58
Adoption20
Hype gap+5
Incentives40