OWASP Gen AI Security Project
guidelineactive

OWASP Top 10 for Agentic Applications for 2026

OWASP Gen AI Security Project

View original resource

OWASP Gen AI Security Project's top-ten list of agentic application risks for 2026, covering memory poisoning, tool misuse, privilege compromise, intent breaking, goal manipulation, and identity spoofing. Includes example attacks and suggested controls per risk.

Tags

agentic AIrisks

At a glance

Published

2025

Jurisdiction

International

Category

Risks and challenges

Access

Public access

More in Risks and challenges

ICO tech futures: Agentic AI

UK Information Commissioner's Office • 2026

International AI Safety Report 2026

Yoshua Bengio et al., UK DSIT • 2026

Agent Skills Enable a New Class of Realistic and Trivially Simple Prompt Injections

Schmotz, Abdelnabi, Andriushchenko • 2025

Related resources

Practices for governing agentic AI systems: OpenAI's seven safety principles

Governance frameworks • OpenAI

Taxonomy of Failure Mode in Agentic AI Systems

Risk taxonomies • Microsoft

The agentic AI landscape and its conceptual foundations

Foundations • OECD

Build your AI governance program

VerifyWise helps you implement AI governance frameworks, track compliance, and manage risk across your AI systems.

Explore the libraryStart free trial
OWASP Top 10 for Agentic Applications for 2026 | VerifyWise AI Governance Library