OWASP Top 10 for LLM Apps 2026: Excessive agency risk on the rise

While prompt injection and data disclosure remain concerns, excessive agency climbed the list — not surprising with recent security incidents.