Executive Summary
OWASP describes prompt injection as an LLM vulnerability that can cause data leakage, privilege escalation and unauthorized execution in multi-step workflows, and lists mitigations.
What Happened
OWASP describes prompt injection as a vulnerability affecting LLMs and notes it can lead to data leakage, privilege escalation, and unauthorized execution in multi-step workflows. The page also points to mitigations such as guardrails, monitoring, scoped responses, and training data hygiene.
Vulnerability / Attack Technique
Prompt injection (reference)
Technical Mechanism
Reference material describing the vulnerability class and mitigations.
AI Security Category
LLM01:2025 Prompt Injection
Part of the Prompt Injection topic.
Relevant Frameworks
RealGround Analysis
The baseline reference for this risk. RealGround analysis: map your controls to OWASP's mitigations.
Recommended Controls
- Apply guardrails, monitoring and scoped responses
- Keep training data clean
Related RealGround Service
Secure AI Agent Build · or start with the free AI Agent Security Scanner.
Sources
OWASP Foundation: https://owasp.org/www-community/attacks/PromptInjection
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.