The OWASP GenAI Security Project released the 2026 edition of its LLM Top 10, which it says updates rankings and expands threat coverage based on real-world incidents. OWASP says the edition maps risks to NIST, MITRE ATLAS, CWE and the OWASP Top 10 for Agentic Applications, and it was followed in September 2026 by an industry framework crosswalk and an Agent Control Standard.
Why it matters
It aligns the main LLM application checklist with the agent-specific list, which affects how audits scope agent risk.
Key facts
As stated in the sources, with where to find them.
- Released August 3, 2026; mapped to NIST, MITRE ATLAS, CWE and the OWASP Agentic Top 10; companion Agent Control Standard (ACS) published September 2026.Resource page
Findings that cite this record
No tracked finding cites this record yet.
Sources
Related records
Dec 9, 2025
Dec 8, 2025
Mar 24, 2025
Nov 17, 2024
Jul 1, 2026
Jan 8, 2026