---
title: OWASP LLM Top 10 Vulnerability Index
description: Index of OWASP Top 10 for LLM Applications (2025) vulnerability identifiers, categories, and cross-references
---

# 00 Vulnerability Index

This document provides the index for the OWASP Top 10 for LLM Applications (2025) vulnerabilities.
Each entry includes its identifier, title, and primary category.

## Vulnerability catalog

| ID         | Title                            | Category               |
|------------|----------------------------------|------------------------|
| LLM01:2025 | Prompt Injection                 | Input Integrity        |
| LLM02:2025 | Sensitive Information Disclosure | Data Protection        |
| LLM03:2025 | Supply Chain                     | Supply Chain           |
| LLM04:2025 | Data and Model Poisoning         | Data Integrity         |
| LLM05:2025 | Improper Output Handling         | Output Safety          |
| LLM06:2025 | Excessive Agency                 | Access Control         |
| LLM07:2025 | System Prompt Leakage            | Configuration Security |
| LLM08:2025 | Vector and Embedding Weaknesses  | Data Integrity         |
| LLM09:2025 | Misinformation                   | Output Reliability     |
| LLM10:2025 | Unbounded Consumption            | Resource Management    |

## Cross-reference matrix

Each vulnerability document follows a consistent structure:

1. Description — what the vulnerability is and how it manifests in LLM systems.
2. Risk — concrete consequences of exploitation and business impact.
3. Vulnerability checklist — indicators that the system is exposed.
4. Prevention controls — defensive measures and rectification steps.
5. Example attack scenarios — realistic exploitation narratives.
6. Detection guidance — signals and methods to identify exposure.
7. Remediation — immediate and long-term actions to contain and resolve.

## Category groupings

### Input Integrity

* LLM01:2025 Prompt Injection

### Data Protection

* LLM02:2025 Sensitive Information Disclosure

### Supply Chain

* LLM03:2025 Supply Chain

### Data Integrity

* LLM04:2025 Data and Model Poisoning
* LLM08:2025 Vector and Embedding Weaknesses

### Output Safety

* LLM05:2025 Improper Output Handling

### Access Control

* LLM06:2025 Excessive Agency

### Configuration Security

* LLM07:2025 System Prompt Leakage

### Output Reliability

* LLM09:2025 Misinformation

### Resource Management

* LLM10:2025 Unbounded Consumption

## Related OWASP projects

* OWASP Top 10 for Agentic Applications (2026) — agentic risks that build upon LLM vulnerabilities.
* OWASP Machine Learning Security Top 10 — ML-specific security risks.
* OWASP Application Security Verification Standard (ASVS) — general application security controls.

---

Content derived from works by the OWASP Foundation, licensed under CC BY-SA 4.0
(<https://creativecommons.org/licenses/by-sa/4.0/>).
Modifications: Restructured into agent-consumable reference format with added
detection and remediation guidance.