OWASP / www-project-top-10-for-large-language-model-applications

OWASP Foundation Web Respository
Other
448 stars 118 forks source link

v2 candidate suggestion - User Interface Access Control Manipulation #376

Closed talesh closed 2 weeks ago

talesh commented 2 weeks ago

PR Checklist 🚨

It is intended that only defined "vulnerability entry leads" should be able to create PR's (See CODEOWNERS and Core Team)

If you are not a CODEOWNER for the entry of artifact, please see our Issues and Discussions boards

Proposed changes

This is a very new direction that is being adopted by LLMs and will likely start becoming a danger as the popular library Langchain has already implemented partial Generative UI and it is the dominant LLM framework being used right now. Very much open to this being merged with LLM08_ExcessiveAgency if applicable.

Types of changes

Put an x in the boxes that apply

Checklist

Put an x in the boxes that apply. You can also fill these out after creating the PR. If you're unsure about any of them, don't hesitate to ask. We're here to help! This is simply a reminder of what we are going to look for before merging your code.

Further comments

If this is a relatively large or complex change, kick off the discussion by explaining why you chose the solution you did and what alternatives you considered, etc...