Verified65% confidenceFactExact time
OWASP published the first version of the LLM Top 10 security risk list in 2023, and in the 2024 updated version refined 'Excessive Agency' (LLM08) into three dimensions: too many functions, excessive permissions, and too much autonomy.
3
Sources
65%
Confidence
Long-term
Relevance
7/11/2026
First Seen
Sources
AI Coding Tool Security Governance: How Policy Enforcement Guardrails Ensure Enterprise Compliance
hackernewshackernews7/9/2026
Related Claims
VerifiedThe OWASP Top 10 threat list specifically targeting LLMs was officially published in 2023.81% similarUnverifiedOWASP lists prompt injection as LLM01, the highest risk for LLM-powered applications in 2026.77% similarUnverifiedThe OWASP Top 10 list of risks for large language model applications was first published in 2023 and updated in 2025.75% similarUnverifiedThe OWASP Top 10 for LLM Applications list was updated in 2025.72% similarUnverifiedThe first edition of the OWASP Top 10 for LLM Applications in 2023 listed Prompt Injection as LLM01, and the 2025 edition still places it first and subdivides it into direct injection and indirect injection.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/486341API
curl https://kongchang.com/api/v1/knowledge/claims/486341MCP
get_claim(id=486341)