Issue Details
Insecure Plugin Design
llm07-2024 • Rank #7 in OWASP 2025
Explanation
Insecure plugin or tool integration grants models pathways to execute high-impact operations without adequate authorization boundaries. Attackers chain prompt abuse with permissive tool capabilities to exfiltrate data or perform unauthorized actions. Weak input validation and broad permission scopes make these systems highly exploitable.
Remedy
Restrict tool permissions to least privilege and require explicit policy checks per action. Validate and sanitize tool inputs and outputs, and block high-risk operations by default. Introduce approval gates for irreversible or sensitive workflows and monitor tool-use telemetry for abuse patterns.
| Year | Rank | Category |
|---|---|---|
| 2024 | #7 | llm07-2024 - Insecure Plugin Design |