OWASP Top 10 for LLM Applications 2025.pdf

The OWASP Top 10 for LLM Applications 2025 is a community-produced guidance document that enumerates the ten highest-priority security risks for LLM-based systems (e.g., Prompt Injection, Sensitive Information Disclosure, Supply Chain risks, Data/Model Poisoning, Improper Output Handling, Excessive Agency, System Prompt Leakage, Vector/Embedding Weaknesses, Misinformation, and Unbounded Consumption). For each entry it provides descriptions, common examples, example attack scenarios, references, related frameworks/taxonomies, and recommended prevention and mitigation strategies to help developers and security teams secure LLM applications.