standard

OWASP Top 10 for Large Language Model Applications 2026

2026 edition of the LLM application risk list: prompt injection first, sensitive information disclosure second, excessive agency third, plus seven further categories and a crosswalk to nine external frameworks.

Known aliases

2026 LLM Top 10

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 distinct publisher

The 2026 LLM Top 10 lands: prompt injection still first, hidden context now its own line item

OWASP's refreshed list names hidden context exposure and vector weaknesses, maps all ten risks to nine external frameworks, and moves the identifiers that older policy documents cite.

Publishers:scworld.com

Reality

Evidence58
Adoption20
Hype gap+5
Incentives40