Release
OWASP publishes its Top 10 2026 of LLM application risks, focused on the consequences of access to tools.
Prompt injection remains in first place, while excessive agency moves from sixth to third place.
Unbounded consumption gains four places, from 10th to sixth place.
The ranking compares practitioners' opinion with 7,714 public incidents, of which 6,639 are classifiable.
The community vote weighs 75% of the final result, against 25% for the incident data.