OWASP Top 10 for LLM Apps 2026: Excessive agency risk on the rise

Prompt injection is still king, but “excessive agency” just jumped to #3 in OWASP’s Top 10 for LLM apps. Stop chasing unbreakable models—start containing fooled agents. more