---
title: OWASP Agentic Top 10 Vulnerability Index
description: Index of OWASP Top 10 for Agentic Applications (2026) vulnerability identifiers, categories, and cross-references
---

# 00 Vulnerability Index

This document provides the index for the OWASP Top 10 for Agentic Applications (2026) vulnerabilities.
Each entry includes its identifier, title, and primary category.

## Vulnerability catalog

| ID | Title | Category |
|---|---|---|
| ASI01:2026 | Agent Goal Hijack | Goal Integrity |
| ASI02:2026 | Tool Misuse and Exploitation | Tool Security |
| ASI03:2026 | Identity and Privilege Abuse | Access Control |
| ASI04:2026 | Agentic Supply Chain Vulnerabilities | Supply Chain |
| ASI05:2026 | Unexpected Code Execution | Execution Safety |
| ASI06:2026 | Memory and Context Poisoning | Data Integrity |
| ASI07:2026 | Insecure Inter-Agent Communication | Communication Security |
| ASI08:2026 | Cascading Failures | Resilience |
| ASI09:2026 | Human-Agent Trust Exploitation | Human Factors |
| ASI10:2026 | Rogue Agents | Behavioral Integrity |

## Cross-reference matrix

Each vulnerability document follows a consistent structure:

1. Description — what the vulnerability is and how it manifests in agentic systems.
2. Risk — potential impacts and consequences of the vulnerability.
3. Vulnerability checklist — conditions and patterns that indicate the vulnerability is present.
4. Prevention controls — proactive measures to prevent the vulnerability.
5. Example attack scenarios — realistic exploitation narratives.
6. Detection guidance — how to detect if the vulnerability exists or is being exploited.
7. Remediation — concrete actions to fix identified instances.

## Category groupings

### Goal Integrity

* ASI01:2026 Agent Goal Hijack

### Tool Security

* ASI02:2026 Tool Misuse and Exploitation

### Access Control

* ASI03:2026 Identity and Privilege Abuse

### Supply Chain

* ASI04:2026 Agentic Supply Chain Vulnerabilities

### Execution Safety

* ASI05:2026 Unexpected Code Execution

### Data Integrity

* ASI06:2026 Memory and Context Poisoning

### Communication Security

* ASI07:2026 Insecure Inter-Agent Communication

### Resilience

* ASI08:2026 Cascading Failures

### Human Factors

* ASI09:2026 Human-Agent Trust Exploitation

### Behavioral Integrity

* ASI10:2026 Rogue Agents

## Related OWASP projects

* OWASP Top 10 for LLM Applications (2025) — foundational LLM risks that agentic vulnerabilities build upon.
* OWASP Agentic AI Threats and Mitigations Guide — detailed threat modeling for agentic systems.
* OWASP AI Vulnerability Scoring System (AIVSS) — severity scoring framework for AI-specific risks.

---

Content derived from works by the OWASP Foundation, licensed under CC BY-SA 4.0
(<https://creativecommons.org/licenses/by-sa/4.0/>).
Modifications: Restructured into agent-consumable reference format with added
detection and remediation guidance.

*🤖 Crafted with precision by ✨Copilot following brilliant human instruction, then carefully refined by our team of discerning human reviewers.*
