Skip to content

Glossary: Modern Vulnerabilities, Malware and Physical Attacks

Excessive agency

An OWASP LLM risk where the model can take actions (send, delete, pay) that it does not need. Alex removed the chatbot's ability to change addresses for this reason.

Where the book teaches it

Related terms

OWASP Top 10 for LLM ApplicationsLeast privilege