Executive Summary
OWASP's LLM01:2025 entry defines direct and indirect prompt injection and gives mitigations such as output format validation, input and output filtering and least-privilege tool access.
What Happened
The OWASP GenAI Security Project’s LLM01 entry defines prompt injection vulnerabilities and describes how both direct and indirect injections can cause LLM applications to violate guardrails, leak sensitive information, or influence critical business decisions.[4] It provides mitigation guidance relevant to SMBs and SaaS builders, including strict output format validation, input and output filtering, least-privilege access for connected tools and data, and human-in-the-loop controls for high-risk actions.[4]
Vulnerability / Attack Technique
Prompt injection (reference)
Technical Mechanism
The canonical definition and mitigation list.
AI Security Category
LLM01:2025 Prompt Injection
Part of the Prompt Injection topic.
Relevant Frameworks
RealGround Analysis
The reference RealGround aligns its testing to.
Recommended Controls
- Validate output formats
- Use least-privilege access for connected tools
Related RealGround Service
Secure AI Agent Build · or start with the free AI Agent Security Scanner.
Sources
OWASP: https://genai.owasp.org/llmrisk/llm01-prompt-injection/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.